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Preface 





This book provides a comprehensive look at computer networking from the point of 
view of the network administrator. It guides readers from an entry-level knowledge 
in computer networks to advanced concepts in Ethernet networks, router configuration, 
TCP/IP networks, routing protocols, local, campus, and wide area network configu- 
ration, network security, wireless networking, optical networks, Voice over IP, the 
network server, Linux networking, and industrial networks. After covering the entire 
text, readers will have gained a solid knowledge base in computer networks. 

In my years of teaching, I have observed that technology students prefer to 
learn “how to swim” after they have gotten wet and taken in a little water. Then they 
are ready for more challenges. Show the students the technology, how it is used, and 
why, and they will take the applications of the technology to the next level. Allowing 
them to experiment with the technology helps them to develop a greater understand- 
ing. This book does just that. 


ORGANIZATION OF THE TEXT 


This text is designed to cover two semesters. The recommended chapters for the first 
semester are Chapters | to 8. Throughout the semester, the students will gain an ap- 
preciation of how basic computer networks and related hardware are interconnected to 
form a network. This involves understanding the concepts and issues of twisted-pair 
cable, interconnecting LANs, configuring TCP/IP, subnet masking, basic router con- 
figuration, and configuring routing protocols and wide area networking. 

Chapters 9 to 16 are recommended for the second semester—configuring and 
managing the campus network, network security, wireless LANs, and optical networks. 
The instructor can choose from the following topics to complete the semester: in- 
stalling and configuring Windows 2008/2003 network server, Voice over IP, Linux 
configuration, and industrial networks. 


Preface „— V 


Key Pedagogical Features 


e Chapter Outline, Objectives, Key Terms, and Introduction at the beginning of 
each chapter clearly outline specific goals for the reader. An example of these 
features is shown in Figure P-1. 
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Chapter Outline Chapter Objectives 


FIGURE P-1 
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Questions and Problem s 


+ Describe line coding and framing form at 

+ Describe the function of the CSU/DSU 

+ Describe how to create a frame relay connection 
+ Dem onstrate the configuration for a point-to-point connection 
+ Discuss the ATMm ode of operation 
+ Describe a wide area network 

+ Describe how to configure dial-in access on a Windows 2003/2000 Server 
+ Describe how to configure a VPN tunnel 

+ Describe the different types of WAN connections 

+ Describe the steps for configuring Itemet routing 
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region, the country, or the 


AS 65088 


This chapter examines the concepts for establishing wide area network (WAN) con- 
nections. WANs use the telecommunication network to interconnect sites that are ge- 
ographically distributed throughout a region, the country, or even the world. 
Connections can include extensions of the campus LAN to remote members of the 
network. For example, the corporate office for a company could be located in one part 
of a state and the engineering, manufacturing, and sales sites could be at different lo- 
cations in the state. An example of a WAN is shown in Fig. 8-1. The wide area net- 
work in this example shows connections for the Internet, a frame relay network, a 
VPN network, and dial-in access through a remote access server. 

This chapter examines each of these wide area networking technologies. An in- 
troduction to setting up a connection to the communications carrier is examined in 
section 8-2. The CSU/DSU, serial line clocking, and line coding formats are exam- 
ined. The important concept of configuring frame relay networks is next examined in 
section 8-3. This section includes an example of configuring a frame relay network 
within a simulated Telco “cloud.” 

Section 8-4 examines the asynchronous transfer mode (ATM) and its important 
role in carrying high-speed data traffic around the country and the world. Wide area 
networking is not complete without dial-in access for the user. Section 8-5 examines 
establishing a point-to-point dial-in connection using a phone modem, cable modem, 
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An example of a wide area network. 
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Key Terms for this chapter 





e Net-Challenge Software provides a simulated, hands-on experience in config- 
uring routers. Exercises provided in the text (see Figure P-2) and on the CD 
challenge readers to undertake certain router/network configuration tasks. The 
challenges check the students’ ability to enter basic networking commands and 
to set up router function, such as configuring the interface (Ethernet and Serial) 
and routing protocols (that is, OSPF, BGP, EIGRP, IGRP, RIP, and static). The 
software has the look and feel of actually being connected to the router’s con- 
sole port. 

e Protocol Analyzer Software packaged with the text uses the Finisar Surveyor 
Demo. Examples of using the software to analyze data traffic are included 
throughout the text, as shown in Figure P-3. 

e Numerous worked-out examples are included in every chapter to reinforce key 
concepts and aid in subject mastery, as shown in Figure P-3. 
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The Cisco UBRO series cable access router. (Courtesy of Cisco System s) 


A command used for displaying only the OSPF routes is sh ip route ospf. The 
results for this command from RouterA are shown: 


RouterA#sh ip route ospf 
10.0.0.0/24 is subnetted, 6 subnets 


o 
o 
o 


Net-Challenges are 
found throughout 
the text 


10.10.5.0 [110/74] via 10.10.100.2, 00:10:03, Ethernet2 

10.10.10.0 [110/74] via 10.10.200.2, 00:10:03, Ethernet1 

10.10.150.0 [110/128] via 10.10.200.2, 00:10:03, Ethernet1 
[110/128] via 10.10.100.2, 00:10:03, Ethernet2 


Another command used for displaying protocol information for the router is sh 
ip protocol. The results for entering this command for RouterA are shown: 


RouterA#sh ip protocol 

Routing Protocol is “ospf 100” 
Sending updates every 0 seconds 
Invalid after 0 seconds, hold down 0, flushed after 0 
Outgoing update filter list for all interfaces is 
Incoming update filter list for all interfaces is 
Redistributing: ospf 100 
Routing for Networks: 


CD-ROM in your computer’s drive. Open the Net-Challenge folder, click on Net- 
Challenge.exe. Once the software is running, click on the Select Router Challenge 
button. This opens a Select Router Challenge drop-down menu. Select Chapter 7— 
OSPF. This opens a check box that can be used to verify that you have completed all 


of the tasks. _ 


Enter the privileged EXEC mode on the router. 
Enter the router’s terminal configuration mode, Router(config). 
Set the hostname to RouterA. 
Configure the EthernetO interface with the following: 
IP address 10.10.20.250 
Subnet mask 255.255.255.0 
Enable the EO interface. 
6. Configure the Ethernet! interface with the following: 
IP address 10.10.200.1 
Subnet mask 255.255.255.0 
7. Enable the El interface. 
8. Configure the Ethernet2 interface with the following: 
IP address 10.10.100.1 
Subnet mask 255.255.255.0 
9. Enable the E2 interface. 
10. Enable OSPF with a network number of 100. 
11. Use a single command line instruction to configure RouterA to run OSPF on 
all three of the Ethernet interfaces (use area 100). 
12. Use the sh ip int brief command to check the interface status. 
13. Use the sh ip protocol command to see if OSPF is running on RouterA. 
14. Use the sh ip route command to verify that the three Ethernet ports are con- 
nected to RouterA. 
15. Use the sh run command to view the running-configuration file on 
RouterA. Verify that OSPF is enabled and the proper network address is 
specified. 


Sata ee 
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Exercises challenge 
readers to undertake 


certain tasks 


10.10.20.250/32 
7-7 EIGRP—ENHANCED INTERIOR GATEWAY 
10.10.100.1/32 R P 
10.10.200.1/32 OUTING FROTOCOL 
aee ; last. Update This section introduces techniques for configuring a router’s interface to run EIGRP, 
10.10 en 1 110 00:06: A the Enhanced Interior Gateway Routing Protocol. EIGRP is an enhanced version of — Enhanced Interior Gateway 
ewes . eae, the Interior Gateway Routing Protocol (IGRP). EIGRP is a Cisco proprietary link Routing Protocol 
10.10.200.2 110 00:06:01 es ec 
A . state protocol. EIGRP calculates route metrics in a similar way as IGRP but uses a 
Distance: (default is 110) £ s h ; 
technique to improve the detail on metrics. 
EIGRP allows the use of variable length subnet masks, which is beneficial 
2 when trying to conserve the uses of IP addresses. EIGRP also uses “Hello” packets 
Networking Challenge OSPF to verify that a link from one router to another is still active. This is similar to the 
Use the Net-Challenge simulator software included with the text’s Companion CD- OSPF “Hello” packet described in section 7-6. The routing table updates are ex- 
ROM to demonstrate that you can configure OSPF for RouterB in the campus LAN changed when there is a change in the network. In other words, the routers don’t ex- 
(the campus LAN is shown in Fig. 7-12 and is displayed on the computer screen once change unnecessary information unless a route changes. This helps conserve the 
the software is started). Make sure that you have configured your computer’s display limited bandwidth of the network data link. When route information is exchanged, 
to meet the 800 x 600 pixel display resolution requirement. Place the Net-Challenge EIGRP quickly converges to the new route selection. 
214 Chapter 7 ° Routing Protocols Section 7-7 * £IGRP—E€nhanced Interior Gateway Routing Protocol 215 








FIGURE P-2 
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Finisar Surveyor ——_. 
Demo are included 
throughout the text 
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The setup for the capture Host >| Host 
of the TCP connection. A B 


Client FTP server 





ma ay 


An example of the thee packets exchanged tn the initel TCP handshake 


in packet 1 (x + 1). Remember, Host A and Host B each have their own sequence 
numbers. This completes the three-packet handshake that establishes the TCP con- 
nection. This handshake appears at the beginning of all TCP data transfers. 

The following is an example of a TCP packet transmission captured using the 
Surveyor Demo protocol analyzer software provided on the text’s Companion CD- 
ROM. The network setup is shown in Fig. 5-4. Host A (the client) is establishing an 
FTP connection with Host B. The captured file is 5-a.cap and is also provided on the 
CD-ROM in the Capture folder. Portions of the captured data packets are shown in 
Fig. 5-5. 

Packet 1 (ID 000001) is the SYN or synchronizing packet. This packet is sent 
from the host computer on the network that wants to establish a TCP network con- 
nection. In this example, Host A is making a TCP connection for an FTP file transfer. 
The summary information for packet 1 specifies that this is a TCP packet, the source 
port is 1054 (SP=1054), and the destination port is 21 (DP=21). Port 1054 is an ar- 
bitrary port number that the FTP client picks or is assigned by the operating system. 
The destination port 21 is the well-known FTP port (see Table 5-3). The packet has a 
starting sequence number, 997462768, and there is no acknowledgement (ACK=0). 
The length of the data packet is O (LEN=0). This indicates that the packet does not 
contain any data. The window size = 16384 (WS=16384). The window size indicates 
how many data packets can be transferred without an acknowledgement. 

Packet 2 is the SYN-ACK packet from the FTP server. The sequence number 
SEQ = 3909625466 is the start of a new sequence for the data packet transfers from 
Host B. The source port is 21 (SP=21) and the destination port for packet 2 is 1054 
(DP= 1054). ACK =997462769 is an acknowledge by host B (the FTP server) that 
the first TCP transmission was received. Note that this acknowledgement shows an 
increment of 1 from the starting sequence number provided by host A in packet 1. 

Packet 3 is an acknowledgement from the client (host A) back to the FTP server 
(host B) that packet 2 was received. Note that the acknowledgement is 
ACK=3909625467, which is an increment of | from the SEQ number transmitted in 
packet 2. This completes the initial handshake establishing the TCP connection. The 
next part is the data packet transfer. At this point, the two hosts can begin transferring 
data packets. 

The last part of the TCP connection is terminating the session for each host. The 
first thing that happens is a host sends a FIN (finish) packet to the other connected 
host. This is shown in Fig. 5-6. Host B sends a FIN packet to Host A indicating the 


TCP/IP 


1. Divide the decimal number by 2, record the remainder of 0 or 1 and write the 
quotient or result of the division by 2. 

2. Divide the quotient by 2 and record the remainder of 0 or 1. Write the quotient 
and repeat this step until the quotient is 0. 

3. Write the remainder numbers (0 and 1) in reverse order to obtain the binary 
equivalent value. 


_@xample 5-2 


Convert the decimal number 12 to binary. 


Solution: 


Divide 12 by 2. This equals 6 with a remainder of 0. Divide 6 by 2. This equals 3 with a re- 
mainder of 0. Divide 3 by 2. This equals 1 with a remainder of 1. Divide 1 by 2. This equals 
0 with a remainder of 1. The quotient is 0; therefore the conversion is done. Write the re- 
mainder numbers in reverse order to generate the binary equivalent value. This yields a 
value of 1 1 0 0. The calculation for this is shown: 





202 

216 0 
2143. 0 
20_ 1 
Q@ 41 


You can verify the answer by converting the binary number back to decimal. 


8 4 2 1 
1 1 0 0 





(x8) +(1x4)=12 


Example 5-3 


Convert 33 to its binary equivalent. 


Solution: 


Use the decimal-to-binary steps listed previously. 
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The answer is 100001. 


Section 5-3 ° Number Conversion 
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subject mastery 
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FIGURE P-3 


Preface V 





e Configuring, Analyzing, or Troubleshooting sections, as shown in Figure P-4, 
are included with each chapter to guide the reader through advanced techniques 
in networking. 


To install the 2003 server, click on start > programs > administrative tools > 
Screen captures 


Configure Your Server Wizard. This will open a “Welcome to the Configure Your 
Server” menu. Click “Next” to begin. You will be prompted with a menu asking you 


g U l d e stu d e n ts to verify that you have completed some preliminary setup steps. Review the setup and 


click on Next when done. This opens the Server Role menu. This menu allows you 


TAR e e a te e h h h d i ff to select the services desired (e.g., file server, print server, mail server, etc.). For the 
Tia RC aan a es i di t ro U g t e l e re nt basic setup, select file server and click on exit. 
ha nds-on exercises 


C on fi g urin g , If you are upgrading a Windows 2000 server to 2003, you will be advised that 

š there are some compatibility issues between 2000 and 2003 server. You will be di- 

beplan, aii ma ne Te iai ana lyzi ng i q nd rected to exit the configuration wizard and start the command prompt. You will 
be instructed to enter the 386 directory on the installation CD-ROM. Enter the com- 


tp man i iis troubleshooting ma 


Th Ai 








ipm be men E En ka kmar ormie r e eer a mar e | 


adprep/forest prep 





ee Coe) sm | sections guide a Senper 
read ers th rou g h Next, while still in the 386 directory on the installation CD-ROM enter 


adprep/domain prep 


adva n ced After completing these steps, restart to Configure Your Server Wizard. The remain- 
h . . ing steps for the 2003 server installation will be fairly automatic and you will see a 
tec ni q Ues In limited number of menus. The two adprep commands upgraded the 2000 server ac- 


The window displaying a summary of the server options selected. 


ba rai ary A 


Compicterg lhe Actwe Deerctory A 7 sa k : ij 
Indian Wired tive directory so that it is now compatible with Windows 2003 Server. The 2003 


n etwo rki n g server should now be running the Windows 2000 “salsa” domain configuration. 


Configuring the IP Address 
The next step is to configure the IP address for the network server. The network ad- 
ministrator typically selects the IP address. Make sure that you have a confirmed IP 
address prior to placing the server on the network. If two computers connected to 
the network have an IP address conflict, neither computer will function properly on 
the network. 

First, right click on My Network Places > Properties > right mouse click on 
Local Area Connection > Properties, or (Windows 2000 Server) click on Start > 
Settings > Network and Dialup Connections > and right click on Local Area Con- 


Config U ri ng i nection > Properties. 


(Windows 2003 Server) click on Start — Control Panel — Network Connec- 





| e tions — right mouse click on Local Area Connection - Properties 
ana yZI n g 1 or At this point you should be placed in the Local Area Connection Proper- 
j a a ties menu as shown in Fig. 14-18. Double click on Internet Protocol TCP/IP. 
ETNE mam ee at a as mam ia am iraa activate the changes magé to the Active trou b | es h ooti n g This places you in the Internet Protocol (TCP/IP) Properties menu shown in 

ares Ae E TT Directory. Fig. 14-19. 
S e cti O n S a r e Click on Use the following IP address and set the address specified for your 
Eee j_n j network. In this example, the private IP address 10.10.10.4 has been selected and a 
DENNE . . subnet mask of 255.0.0.0 is being used. The other option, Obtain an IP address au- 
| n C l U d ed | n tomatically, is used when the IP addresses are assigned dynamically and when a dy- 
namic host control (DHCP) server is used. Click OK once this step is complete. 

. . ed C h C h a pte r At this point you want to verify that the computer has accepted the requested 
The steps for configuring the 2003 server vary depending on the current status of the IP address change, which you do by entering the command prompt in the Start menu. 
operating system installed on the server. This section assumes that the current oper- Click Start > Run, enter command, and at the command prompt enter ipconfig, then 
ating system is Windows 2000 server. hit Return or Enter. The new IP address 10.10.10 4 for the computer should be listed. 


Configuring Windows 2003 Server 


Section 14-2 © Installing and Configuring the Network Server f Chapter 14° The Network Server 


FIGURE P-4 


e Key Terms and their definitions are highlighted in the margins to foster inquis- 
itiveness and ensure retention. This is illustrated in Figure P-5. 

e Extensive Summaries, Questions, and Problems as well as Critical Thinking 
Questions are found at the end of each chapter, as shown in Figure P-6. 
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lie oe LJ 8-9 ANALYZING INTERNET DATA TRAFFIC 





A campus network operations center (NOC) receives many emails and calls NOC 

about suspected problems with the network. Many times network problems are network operations center 
due to operational errors by the users and possible hacker attacks. On occasion, 

network equipment failure can be causing the problem. The bottom line is that the 

network administrator must have some expected performance measure of the net- 


work. The administrator will want to know the expected normal usage of the net- Key Te rms are 


work, what type(s) of normal data traffic is expected, what is typical of 
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th e text IP Telephone ‘outbound’ and ‘inbound’ Internet data traffic, and who are the “big” data users d fi d 5 th 
on the network. Outbound data traffic is data leaving the network and inbound Outbound Data Traffic efine In ec 
The various ways of placing voice over IP telephone calls. data traffic is data entering the network. This section provides an overview of data traffic leaving the k 
the Internet data traffic patterns a NOC might monitor. These patterns are only network ma rg In 


examples of data traffic activity for a network. Data traffic patterns will vary sig- Inbound Data Traffic 
nificantly for each network and each network will have its own typical data tra data traffic entering the 
fic. Also, data traffic will change during the day. Examples of this are presented network 
in Chapter 9 in section 9-6, Analyzing Campus Network Data Traffic. The data 
traffic images shown in this section were captured using the Finisar-Shomiti 
Portable Surveyor. 
The first capture, shown in Fig. 8-57, is a composite view of the data traffic ac- 
tivity for an Internet connection to and from a campus network. The image has four 
screens showing various data traffic information. This screen setup might be typical 
of the screen display at a network monitoring center. This does not imply that some- 
one watches the screen continually but the screen is looked at when a possible data 
traffic problem is mentioned. 





a a Screen captures aid 





ail 
A Cisco Voice over IP system. (Courtesy of Cisco Systems. ) miam = student U ndersta nd l ng 

RTP The frames are then placed into one packet. An RTP (Real-time Protocol) header is = 
Real-time Protocol added to each frame. The RTP header provides the following: 

e Packet sequence number 

e Timestamp 
RTCP Acompanion protocol to RTP is RTCP, the Real-time Control Protocol. The purpose 
Real-time Control Protocol of RTCP is to manage packet synchronization and identification and the transport of 

the data. 

Packet Sequence Number The packet sequence number is used to keep track of the order of the data 
used to keep track of the packets and to detect any lost packets. RTP uses UDP for transporting the data. There 
order of the data packets is always a chance that packets could be lost in a congested network or the packets 


could arrive out of order. The RTP packet sequence number enables a processor to re- 
assemble the data packets. Lost digital voice data packets will cause annoying pops 
and clicks when converted back to analog at the receiver. One technique is to fill in A composite view of network data traffic activity. 


i 41 0 Chapter 13 ° Voice Over IP Section 8-9 ° Analyzing Internet Data Traffic 289 > 





FIGURE P-5 


Summary of key concepts 


47. How is a network address of 192.168.6.0 and a subnet mask of 255.255.254.0 
written in CIDR? 
48. A CIDR block contains the following subnets with IP addresses of 
a. 192.168.68.0/22 
b. 192.168.69.0/22 
c. 192.168.70.0/22 
The layers of TCP/IP and their relationship to the OSI layers d. 192.168.71.0/22 
The basic structure of a 32-bit IPv4 address Are there any problems with this group of subnets in the CIDR block? Show 
How to subnet a network your work. 
How to apply subnet masks in networks 
The purpose of CIDR blocks and supermetting f 
The data structure of an IPv6 hexadecimal address Section 5-7 
How to examine TCP/IP data packets with the Finisar Surveyor Demo Proto- 49. How many bits are in an IPv6 address? 
col Analyzer 50. IPv6 numbers are written in what format? 


_— Questions and Problems o o aaa 
are organized by section 


Summary — ~~ o 


This chapter has presented an overview of the fundamentals of the TCP/IP protocol 
suite. TCP/IP is well established and carries the data traffic over the Internet. The stu- 
dent should understand the following: 


b. 0000:0000:0000:1234:5678:FEDC:BA98:7654 
Section 5-2 c. 1234:5678:ABCD:EF12:0000:0000:1122:3344 
52. Express the IPv4 IP address 192.168.12.5 in IPv6 form using dotted decimal. 


1. What are the four layers of the TCP/IP model? 53. Recover the IPv6 address from the following double-colon notation: 
2. Which layer of the TCP/IP model processes requests from hosts to make sure 1234:5678::AFBC 


a connection is made to the appropriate port? 
3. What are well-known ports? 

. Identify the port numbers for the following applications. Section 5-8 
. Telnet 
. HTTP 
. FTP 
. DNS ius . . 
. DHCP Critical Thinking = Critical Thinking 


. Define the purpose of a connection oriented protocol. Give an example. 56. Your boss has read about IPv6 and wants to know if the network you 5 
- What three packets are exchanged between two hosts when establishing a TCP is ready for the transition. Prepare a response based on the networiC] ue sti ons qan d 
connection? computer operating systems used in your facility. 


“Questions and Problems 


54. What are the server port numbers for an FTP transfer? 
55. How does a client notify a server that an ASCII data transfer is requested? 


- What is the purpose of a Sequence: number (SEQ= ) in TCP data packets? 57. Use the Surveyor Demo protocol analyzer software to capture the start ro b | ems fu rth er 
: Explain how a host knows ifa data packet was not received. session in your network. Identify the packets that are part of the init p 
. Describe how a TCP connection is terminated. shake. 


. What is a connectionless protocol? Give an example. d eve | O p a n q lytica | 


. What is the purpose of the Internet layer in the TCP/IP protocol suite? 


. What is the purpose of an ARP request? Surveyor IP Problems ki | | 
. What is the purpose of an ARP reply? The following questions use the chapter 5-hw.cap file on the Net- Challe? l S 
. What important networking-troubleshooting tool is part of ICMP and how does ROM. 
it test a network connection? 58. What routing protocols are used in this network? 
. When is IGMP used? 59. In the FTP exchange, what operating system is the server running? 
. The network interface layer of the TCP/IP model defines how the host connects 60. What is the destination address for the FTP server? 
to what network? 61. What is the source address for the FTP transfer? 
62. What is the username sent to the FTP server? 
Section 5-3 63. What is the password sent to the FTP server? 


A PRA ; 64. What is the name of the file sent over FTP? 
17. Convert the following 8-bit binary number to decimal: 10010011 65. What are the contents of the file? 


18. Convert the following octet to decimal: 11000000 z j 
66. From Packet ID# 7, what is the FTP ting from the host? 
19. Convert the following 8-bit number to decimal: 11111100 a wee Re ae R 


20. Convert the following binary number to decimal: 11111111 


Questions and Problems 
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Preface 


e An extensive Glossary is found at the end of the book and offers quick, 
accessible definitions to key terms and acronyms, as well as an exhaustive 


Index (Figure P-7). 


Exhaustive Index provides 
quick reference 


Complete Glossary of terms and 
acronyms provide quick reference 





? the help command that can be used at any prompt in the 
command line interface for the Cisco IOS software 

10Base2 10 Mbps-Baseband-200 meters (185 meters) 

absorption light interaction with the atomic structure of the 
fiber material; also involves the conversion of optical 
power to heat 

access layer where the networking devices in a campus LAN 
connect together 

access lists (ACLs) a basic form of firewall protection 

access point a transceiver used to interconnect a wireless 
and a wired LAN 

ACK acknowledgement packet 

ACR combined measurement of attenuation and crosstalk; 
a larger ACR indicates greater data capacity 

Active Directory a centralized system that automates the man- 
agement of user data, security, and distributed services 

ad hoc another term used to describe an independent net- 
work 

administrative distance a number assigned to a protocol or 
route to declare its reliability 

administratively down indicates that the router interface 
has been shut off by the administrator 

ADSL (asymmetric DSL) service providing up to 1.544 
Mbps from the user to the service provider and up to 
8 Mbps back to the user from the service provider 

advertise the sharing of route information 

aging time the length of time a MAC address remains as- 
signed to a port 

AGP Accelerated Graphics Port 

AMI alternate mark inversion 

applet small, limited-function application often used in 
control panels and on Web pages 

application layer provides support for applications, processes 
requests from hosts, and makes sure a connection is 
made to an appropriate port 


area 0 in OSPF this is the root area and is the backbone for 
the network 

areas partition of a large OSPF network into smaller OSPF 
networks 

ARIN American Registry for Internet Numbers 

armored a nondestructive covering 

ARP Address Resolution Protocol; used to map an IP ad- 
dress to its MAC address 

ARP cache temporary storage of MAC addresses recently 
contacted 

ARP reply protocol where the MAC address is returned 

ARP request a query asking which network interface has a 
specified IP address 

ARP table another name for the ARP cache 

ARPAnet Advanced Research Projects Agency network 

AS autonomous systems 

ASN autonomous systems number 

association indicates that the destination address is for a 
networking device connected to one of the ports on the 
bridge; indicates that a link has been established be- 
tween an access point and a client 

asymmetric operation describes the modem operation 
when the data-transfer rates to and from the service 
provider differ 

ATM asynchronous transfer mode 

attenuation the amount of loss in the signal strength or power 
as the signal propagates down a wire or fiber strand 

AUI port a router’s 10 Mbps Ethernet port 

authenticated the server verifies that the computer and 
user are authorized to access the network 

auto-negotiation protocol used by interconnected elec- 
tronic devices to negotiate a link speed 

autonomous system (AS) a number assigned to a rout- 
ing protocol to define which networks exchange 
routes 





/All suffix, 10 
? help command, 163-164 
/httpd start command, 501 
10BaseF, 390 
10BaseF, description of, 17 
10BaseFB, 390 
10Base5, description of, 17 
10BaseFL, 390 
10BaseFL, description of, 17 
10BaseFP, 390 
10BaseT, description of, 17 
10Base2 

components of, 26 

defined, 23 

description of, 17 

network, using ThinNet cabling, 24 
10GB, 390 
24 ESF framing bits, function of, 238 
100BaseFX, 390 
100BaseFX, description of, 17 
100BaseT, description of, 17 
100 Mbps, 443 
1000BaseFX, description of, 17 
1000BaseLX, 390 
1000BaseSX, 390 
1000BaseT, description of, 17 
1000 Mbps, 43 


A 

ABR (available bit-rate), 250 

Absorption, 376 

Accelerated graphics port (AGP), 71,72 

Access layer, 300 

access-list 100 deny tcp any any eq 161 command, 327 


access-list 100 deny udp any any eq snmp command, 328 
access list permit ip any any command, 328 
Access lists (ACLs), 326 
Access point 
adding to basic service set, 344 
defined, 343 
use of association in, 350 
Account configuration, 264-265 
Account lockout policy, network server and, 465-468 
ACK (acknowledgment packet), 117 
ACLs (access lists), 326 
ACR (attenuation-to-crosstalk ratio), 51 
Active directory, 433 
Active directory users 
menu for adding a new computer, 444 
menu for selecting the users and computers, 452 
Active directory users and computers 
menu, 265, 452 
screen, 447 
Adapter address, 11 
Adding 
access point to basic service set, 344 
applications to Linux, 497-503 
computers to Windows 2003/2000 server, 441-443 
groups to network server, 447-450 
modem to the ports window, 263 
network server, 431—432 
organizational units to Windows 2003/2000 server, 447-450 
user account in Linux networking, 473-476 
users to Windows 2003/2000 server, 444-446 
Windows computers to Windows 2003/2000 server, 443 
Windows XP computers to Windows 2003/2000 server, 442 
Address. See also IP address; MAC (media access control) 
address(es) 
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Accompanying CD-ROM 


The CD-ROM packaged with the text includes the Finisar Surveyor Demo software 
and captured data traffic used in the text. This software provides readers with the 
opportunity to capture data traffic on their own network. It also includes the Net- 
Challenge Software, which was developed specifically for this text. 


Instructor Resources 


The Instructor’s Manual to accompany Networking, Second Edition (ISBN 0-13- 
135838-3) provides the entire book in PDF format along with instructor notes for 
each section within each chapter, recommending key concepts that should be covered 
in each chapter. Solutions to all chapter Questions and Problems sections are also in- 
cluded. In addition, the instructor will find a separate Solutions to the Net-Challenges 
Instructor’s Edition PDF as well as a 18 laboratory exercises. Also a test bank with 
which to generate quizzes on the material found within the student edition of the book 
is provided. 


X — Preface 


ACKNOWLEDGMENTS 


I am grateful to the many people who have helped with this text. My sincere thanks 
go to the following technical consultants: 


e Holly Ricketts, for her help with the Windows 2008/2003 server and computer 
fundamentals, Piyasat Nilkew with his help with the router configuration and 
network security. 

e Danny Bosch and Matthew Peralta for sharing their expertise with optical 
networks and unshielded twisted pair cabling, Abel Sanchez for sharing his 
extensive knowledge of Linux, and Don Yates for his help with the initial Net- 
Challenge software and his suggestions on industrial networking. 

e Byron Hicks, for his helpful suggestions on the configuring, managing, and 
troubleshooting sections. 

e Todd Bowman, CCIE#6316, for guiding me through the challenging routing 
protocols, wide area networking, managing a campus type network, and net- 
work security. 


I would also like to thank my many past and present students for their help with this 
book. 


e Jonathan Trejo and Nate Murillo for their work on the Net-Challenge software, 
Adam Segura for his help with taking pictures of the steps for CAT6 termina- 
tion, Marc Montez, Carine George-Morris, Brian Morales, Michael Thomas, 
Jacob Ulibarri, Scott Leppelman, and Aarin Buskirk for their help with labora- 
tory development. Your efforts are greatly appreciated. 

e Aaron Shapiro and Aaron Jackson, for their help in testing the many network 
connections presented in the text. 

e Paul Bueno and Anthony Bueno, for reading through the early draft of the text. 

e Finisar Systems, for allowing me to include the Surveyor Demo Protocol Ana- 
lyzer software with the text. 


I appreciate the excellent feedback of the following reviewers: Phillip Davis, DelMar 
College, TX; Thomas D. Edwards, Carteret Community College, NC; William Hes- 
smiller, Editors & Training Associates; Bill Liu, DeVry University, CA; and Timothy 
Staley, DeVry University, TX. 

My thanks to the people at Prentice Hall for making this project possible: Dave 
Dusthimer, for providing me with the opportunity to work on the second edition of 
this text and Vanessa Evans, for helping make this process enjoyable. Thanks to 
Christopher Cleveland, and the all the people at Cisco Press, and also to the many 
technical editors for their help with editing the manuscript. 

Special thanks to my family for their continued support and patience. 


—Jeffrey S. Beasley 


Acknowledgements „— 


xi 


ABOUT THE AUTHOR 


Jeff Beasley is a professor with the Department of Engineering Technology at New 
Mexico State University. He has been teaching with the department since 1988 and 
is the co-author of Modern Electronic Communication and Electronic Devices and 
Circuits. 


http://web.nmsu.edu/~jbeasley/ 


xii — About the Author 


Brief Contents 





Chapter 1 


Chapter 2 


Chapter 3 


Chapter 4 


Chapter 5 


Chapter 6 


Chapter 7 


Chapter 8 


Chapter 9 


Chapter 10 


Contents — xiii È 


Introduction to Computer Networks 


Physical Layer Cabling: Twisted Pair 


Computer Fundamentals 


Interconnecting the LANs 


TCP/IP 


Introduction to Router 
Configuration 


Routing Protocols 


Wide Area Networking 


Configuring and Managing the 
Campus Network 


Network Security 


2 


48 


100 


120 


154 


192 


224 


288 


352 


386 








Chapter 11 Wireless Networking 412 


Chapter 12 Optical Networking 446 
Chapter 13 Voice over IP 486 
Chapter 14 The Network Server 508 
Chapter 15 Linux Networking 558 
Chapter 16 Industrial Networks 616 
Glossary 635 
Index 651 


xiv —\ Brief Contents 





Contents 





Chapter 1 Introduction to Computer Networks 2 
1-1 INTRODUCTION 5 
1-2 NETWORK TOPOLOGIES 5 
1-3 THE ETHERNET LAN 10 

IP (Internet Protocol) Addressing 15 
1-4 ASSEMBLING A HOME NETWORK 16 

Securing the Home Network 27 

IP Addressing in the Home Network 29 
1-5 ASSEMBLING AN OFFICE LAN 30 
1-6 TESTING AND TROUBLESHOOTING A LAN 35 
1-7 ANALYZING COMPUTER NETWORKS 37 
Summary 43 
Questions and Problems 43 


Chapter 2 Physical Layer Cabling: Twisted Pair 48 


2-1 INTRODUCTION 51 
2-2 STRUCTURED CABLING 51 
Horizontal Cabling 54 
2-3 UNSHIELDED TWISTED-PAIR CABLE 57 
Shielded Twisted-pair Cable 60 
2-4 TERMINATING CAT6/5E/5 UTP CABLES 60 
Computer Communication 61 
Straight-through and Crossover Patch Cables 63 
2-5 CABLE TESTING AND CERTIFICATION 71 
Testing the CAT6 Link 75 
2-6 10 Gigabit Ethernet over Copper 83 
Overview 83 
Alien Crosstalk (AXT) 83 
Signal Transmission 85 


Contents = XV 


2-7 TROUBLESHOOTING COMPUTER NETWORKS 86 


Installation 86 
Cable Stretching 87 
Cable Failing to Meet Manufacturer Specifications 87 
CAT5e Cable Test Examples 88 
Summary 94 
Questions and Problems 94 
Chapter 3 Computer Fundamentals 100 
3-1 INTRODUCTION 102 
3-2 THE COMPUTER BUS CONNECTION 102 
Motherboard Bus Connections 103 
3-3 DEVICE DRIVERS 107 
Verifying Device Drivers on Windows Vista/XP 108 
Verifying Device Drivers on Mac OS X 110 
3-4 COMPUTER MEMORY 112 
Types of Memory 113 
3-5 AN OVERVIEW OF FAT AND NTFS 114 
FAT 114 
FAT32 115 
NTFS 115 
3-6 CONFIGURING THE BIOS BOOT SEQUENCE 116 
Summary 117 
Questions and Problems 117 
Chapter 4 Interconnecting the LANs 120 
4-1 INTRODUCTION 122 
4-2 THE OSI MODEL 122 
4-3 THE NETWORK BRIDGE 124 
4-4 THE NETWORK SWITCH 128 
Hub-Switch Comparison 130 
Managed Switches 133 
Multilayer Switches 137 
4-5 THE ROUTER 138 
The Router Interface: Cisco 2800 Series 139 
The Router Interface—Cisco 2600 Series 140 
The Router Interface—Cisco 2500 Series 140 
4-6 INTERCONNECTING LANS WITH THE ROUTER 143 
Gateway Address 145 
Network Segments 145 


xvi —\_ Contents 


4-7 CONFIGURING THE NETWORK INTERFACE—AUTO- 


NEGOTIATION 145 

Auto-Negotiation Steps 146 

Full Duplex/Half Duplex 146 

Summary 149 

Questions and Problems 149 

Chapter 5 TCP/IP 154 

5-1 INTRODUCTION 156 

5-2 THE TCP/IP LAYERS 156 

The Application Layer 157 

The Transport Layer 158 

The Internet Layer 162 

The Network Interface Layer 164 

5-3 NUMBER CONVERSION 165 

Binary-Decimal Conversion 165 

Decimal— Binary Conversion 166 

Hexadecimal Numbers 168 

5-4  IPV4 ADDRESSING 170 

Private IP Addresses 173 

IP Address Assignment 173 

5-5 SUBNET MASKS 173 

5-6 CIDR BLOCKS 180 

5-7 IPV6 ADDRESSING 182 

5-8 ANALYZING COMPUTER NETWORKS—FTP DATA PACKETS 185 

Summary 187 

Questions and Problems 187 

Chapter 6 Introduction to Router 

Configuration 192 

6-1 INTRODUCTION 194 

6-2 ROUTER FUNDAMENTALS 194 

Layer 3 Networks 195 

6-3 THE CONSOLE PORT CONNECTION 201 

Configuring the HyperTerminal Software (Windows) 203 
Configuring the Z-Term Serial Communications 

Software (Mac) 205 

6-4 |THE ROUTER’S USER EXEC MODE (ROUTER>) 206 

The User EXEC Mode 206 

Router Configuration Challenge—The User EXEC Mode 209 


Contents — xXvil 


6-5 THE ROUTER’S PRIVILEGED EXEC MODE (ROUTER#) 211 


Hostname 212 
Enable Secret 213 
Setting the Line Console Passwords 213 
Fast Ethernet Interface Configuration 214 
Serial Interface Configuration 214 
Router Configuration Challenge—The Privileged EXEC Mode 216 
6-6 TROUBLESHOOTING THE ROUTER INTERFACE 217 
Summary 221 
Questions and Problems 221 
Chapter 7 Routing Protocols 224 
7-1 INTRODUCTION 221 
7-2 STATIC ROUTING 221 
Gateway of Last Resort 233 
Configuring Static Routes 234 
Networking Challenge—Static Routes 236 
7-3 DYNAMIC ROUTING PROTOCOLS 236 
Distance Vector Protocols 238 
Link State Protocols 239 
7-4 RIP—ROUTING INFORMATION PROTOCOL 239 
Configuring Routes with RIP 242 
Networking Challenge—RIP 244 
7-5 IGRP—INTERIOR GATEWAY ROUTING PROTOCOL 245 
Configuring Routes with IGRP 246 
Networking Challenge—IGRP 250 
7-6 OSPF—OPEN SHORTEST PATH FIRST ROUTING PROTOCOL 250 
Configuring Routes with OSPF 252 
Networking Challenge—OSPF 256 

7-/ EIGRP—ENHANCED INTERIOR GATEWAY ROUTING 
PROTOCOL 257 
Configuring Routes with EIGRP 257 
Networking Challenge—EIGRP 262 
7-8 CONFIGURING A JUNIPER ROUTER 262 
Operational Mode 263 
Router Configuration Mode 266 
Displaying the Router Interfaces 267 
Hostname Configuration 268 
Assigning an IP Address to an Interface 268 
Static Route 268 
RIP Configuration 269 
OSPF Configuration 270 


xviii — Contents 


7-9 TFTP—Trivial File Transfer Protocol 271 


Configuring TFTP 271 
Networking Challenge—TFTP 274 
7-10 ANALYZING OSPF “HELLO” PACKETS 275 
Summary 279 
Questions and Problems 279 
Chapter 8 Wide Area Networking 288 
8-1 INTRODUCTION 291 
8-2 THE LINE CONNECTION 292 
Data Channels 292 
Point of Presence 294 
T1 Framing 294 
Line Coding Formats 295 
8-3 FRAME RELAY 298 
Establishing a Frame Relay Connection 301 
Configuring Frame Relay Point-to-Point on the Router 302 
Networking Challenge—Frame Relay 305 
8-4 AIM 305 
Establishing the ATM Connection 308 
8-5 DIAL-IN ACCESS 309 
Analog Modem Technologies 309 
Cable Modems 310 
ISDN 310 
xDSL Modems 312 
The Remote Access Server 315 
8-6 VPN 325 
Configuring a VPN Virtual Interface (Router to Router) 327 
Troubleshooting the VPN Tunnel Link aa. 
Configuring a VPN Server 331 
Configuring a Remote Client's VPN Connection 332 
8-7 WIDE AREA NETWORK ROUTING 337 
8-8 INTERNET ROUTING 338 
Configuring BGP 339 
Networking Challenge—BGP 343 
8-9 ANALYZING INTERNET DATA TRAFFIC 344 
Utilization/Errors Strip Chart 344 
Network Layer Matrix 345 
Network Layer Host Table 346 
Frame Size Distribution 347 
Summary 348 
Questions and Problems 348 


Contents — HX 


Chapter 9 Configuring and Managing the 


Campus Network 352 

9-1 INTRODUCTION 354 

9-2 DESIGNING THE CAMPUS NETWORK 354 

Core Layer 354 

Distribution Layer 355 

Access Layer 356 

Data Flow 356 

Selecting the Media 356 

Load Balancing 357 

9-3 IP ASSIGNMENT AND DHCP 358 

The DHCP Data Packets 360 

9-4 NETWORK SERVICES— DNS 361 

Campus DNS 363 

9-5 NETWORK MANAGEMENT 364 

Configuring SNMP 365 

Power over Ethernet (PoE) 367 

9-6 — Switch/VLAN Configuration 369 

Virtual LAN (VLAN) 369 

Switch Configuration 370 

Hostname 371 

Enable Secret 372 

Setting the Line Console Passwords 372 

Static VLAN Configuration 373 

Networking Challenge—Static VLAN Configuration 376 

Spanning-Tree Protocol 377 

9-7 ANALYZING CAMPUS NETWORK DATA TRAFFIC 378 

Summary 381 

Questions and Problems 381 

Chapter 10 Network Security 386 

10-1 INTRODUCTION 388 
10-2 INTRUSION (HOW AN ATTACKER GAINS CONTROL OF A 

NETWORK) 388 

Social Engineering 389 

Password Cracking 389 

Packet Sniffing 390 

Vulnerable Software 391 

Viruses and Worms 393 

Wireless Vulnerabilities 394 


— — Contents 


10-3 DENIAL OF SERVICE 395 


Distributed Denial of Service Attacks (DDoS) 396 
10-4 FIREWALLS AND ACCESS LISTS 396 
Attack Prevention 398 
10-5 INTRUSION DETECTION 404 
10-6 ANALYZING UNSECURED DATA PACKETS 405 
Summary 409 
Questions and Problems 409 
Chapter 11 Wireless Networking 412 
11-1 INTRODUCTION 414 
11-2 THE IEEE 802.11 WIRELESS LAN STANDARD 414 
11-3 802.11 WIRELESS NETWORKING 420 
11-4 Bluetooth, WiMAX, and RFID 429 
Bluetooth 429 
WiMAX 432 
RFID (Radio Frequency Identification) 432 
11-5 SECURING WIRELESS LANS 435 
11-6 CONFIGURING A POINT-TO-MULTIPOINT WIRELESS LAN: A 
CASE STUDY 438 
1. Antenna Site Survey 439 
2. Establishing a Point-to-Point Wireless Link to the Home 
Network 439 
3-4. Configuring the Multipoint Distribution/Conducting 
an RF Site Survey 440 
5. Configuring the Remote Installations 442 
Summary 443 
Questions and Problems 443 
Chapter 12 Optical Networking 446 
12-1 INTRODUCTION 449 
12-2 THE NATURE OF LIGHT 451 
Graded-Index Fiber 454 
Single-Mode Fibers 455 
12-3 FIBER ATTENUATION AND DISPERSION 457 
Attenuation 457 
Dispersion 458 
Dispersion Compensation 460 


Contents — a 


12-4 OPTICAL COMPONENTS 461 


Intermediate Components 463 
Detectors 464 
Fiber Connectorization 466 
12-5 OPTICAL NETWORKING ARCHITECTURES 468 
Defining Optical Networking 468 
Building Distribution 470 
Campus Distribution 472 
12-6 SYSTEM DESIGN AND OPERATIONAL ISSUES 475 
12-7 SAFETY 479 
12-8 TROUBLESHOOTING COMPUTER NETWORKS (THE OTDR) 481 
Summary 483 
Questions and Problems 483 
Chapter 13 Voice over IP 486 
13-1 INTRODUCTION 488 
13-2 THE BASICS OF VOICE OVER IP 488 
13-3 VOICE OVER IP NETWORKS 490 
Replacing an Existing PBX Tie Line 491 
Upgrading Existing PBXs to Support IP Telephony 493 
Switching to a Complete IP Telephony Solution 494 
13-4 QUALITY OF SERVICE 495 
Jitter 495 
Network Latency 496 
Queuing 496 
13-5 ANALYZING VoIP DATA PACKETS 497 
Analyzing VoIP Telephone Call Data Packets 502 
Summary 506 
Questions and Problems 506 
Chapter 14 The Network Server 508 
14-1 INTRODUCTION 510 
Network Definitions 510 
Network Types 510 
Server Types 512 
Adding the Network Server 513 
14-2 INSTALLING AND CONFIGURING THE NETWORK SERVER 514 
Creating a Server Domain (Windows 2003 Server) 514 
Configuring Windows 2008 Server 521 
Configuring the IP Address 521 


i —, Contents 


14-3 ADDING COMPUTERS, USERS, AND GROUPS 522 
Adding Computers to the Windows 2008/2003 Server 
Domain 522 
Adding Users to the Windows 2008/2003 Server Domain 526 
Adding Organizational Units and Groups to the Windows 


2008/2003 Server Domain 528 
14-4 SETTING GROUP PERMISSIONS AND POLICIES 533 
2008 Server: Setting Domain Policies 534 
2003 Server: Setting Domain Policies 539 
14-5 VERIFYING “NETWORK” AND “MY NETWORK PLACES” IN 
WINDOWS-BASED PCS 546 
“Network,” Windows Vista 546 
“My Network Places” on Windows XP 546 
“My Network Places” on Windows 2000 550 
“Network Neighborhood” for Windows NT and 98 552 
14-6 CONFIGURING THE NETWORK SERVER'S ACCOUNT LOCKOUT 
POLICY 552 
Summary 556 
Questions and Problems 556 
Chapter 15 Linux Networking 558 
15-1 INTRODUCTION 560 
15-2 LOGGING ON TO LINUX 560 
Adding a User Account 561 
15-3 LINUX FILE STRUCTURE AND FILE COMMANDS 565 
Listing Files 565 
Displaying File Contents 567 
Directory Operations 569 
File Operations 571 
Permissions and Ownership 573 
15-4 LINUX ADMINISTRATION COMMANDS 577 
The man (manual) Command 577 
The ps (processes) Command 579 
The su (substitute user) Command 580 
The mount Command 581 
The shutdown Command 583 
Linux Tips 583 
15-5 ADDING APPLICATIONS TO LINUX 584 
15-6 LINUX NETWORKING 590 
Installing SSH 594 
The ftp Client 595 
The ftp Server 596 


Contents — Xxiil 


DNS Service on Linux 597 


Changing the Hostname 597 

15-7 TROUBLESHOOTING SYSTEM AND NETWORK PROBLEMS 
WITH LINUX 598 
Troubleshooting Boot Processes 598 
Listing Users on the System 600 
Network Security 601 
Enabling and Disabling Boot Services 602 
15-8 MANAGING THE LINUX SYSTEM 604 
Summary 611 
Questions and Problems 611 
Chapter 16 Industrial Networks 616 
16-1 INTRODUCTION 618 
16-2 OVERVIEW OF INDUSTRIAL NETWORKS 618 
Characteristics of Industrial Networks 619 
16-3 INDUSTRIAL ETHERNET 625 
Achieving Determinism 625 
Topology 626 
Switching 627 
Cabling and Components 627 
16-4 INDUSTRIAL ETHERNET PROTOCOLS 628 
Ethernet/IP 629 
Foundation Fieldbus High-Speed Ethernet (HSE) 629 
Profinet 630 
Interface for Distributed Automation (IDA) 630 
Manufacturing Message Specification (MMS) 630 
Modbus TCP 630 
16-5 LEGACY DEVICE AND CONTROLLER LEVEL BUSES 630 
Open Buses 630 
Proprietary Buses 631 
Summary 632 
Questions and Problems 632 
Glossary 635 
Index 651 


XXV — Contents 


This page intentionally left blank 














V Introduction to 
Computer 








Networks 























CHAPTER OUTLINE 
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OBJECTIVES 


Explain the various LAN topologies 

Define the function of a networking protocol 
Describe CSMA/CD for the Ethernet 
protocol 

Describe the structure of the Ethernet packet 
frame 

Define the function of the network interface 
card 

Describe the purpose of the MAC address on 
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Summary 


Questions and Problems 


Discuss how to determine the MAC address 
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Discuss the fundamentals of IP addressing 
Discuss the issues of configuring a home net- 
work 

Discuss the issue of assembling an office 
LAN 

Discuss the procedures for troubleshooting a 
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Describe how a protocol analyzer is used to 
examine network data packets 
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Address Resolution 
Protocol (ARP) 
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1-1 INTRODUCTION 


Each day computer users use their computer for sending and retrieving email, sched- 
uling meetings, sharing files, preparing reports, exchanging images, and maybe 
checking the current price of an auction item on the Internet. All of this requires com- 
puters to access multiple networks and share their resources. The multiple networks 
required to accomplish this are the local area network (LAN), the campus area net- 
work (CAN), the metropolitan area network (MAN), and the wide area network 
(WAN). 

This text introduces the reader to the techniques for implementing modern 
computer networks. Each chapter steps the student through the various modern net- 
working technologies and methodologies and includes a section on configuring, an- 
alyzing, or troubleshooting computer networks. The accompanying CD-ROM comes 
with two software packages, the Finisar-Surveyor Demo protocol analyzer and the 
Net-Challenge simulator software developed specifically for this text. Each of these 
software enhancements provides the reader with invaluable insight into the inner 
workings of computer networking and with the experience of configuring and trou- 
bleshooting computer networks. 

The ease of connecting to the Internet and the dramatic decrease in computer Local Area Network 
systems’ cost have led to an explosion in their usage. Organizations such as corpora- (LAN) 
tions, colleges, and government agencies have acquired large numbers of single-user Network of users that share 
computer systems. These systems may be dedicated to word processing, scientific computer cali eae 

. limited area 

computation, process control, or may be general-purpose computers that perform 
many tasks. This has generated a need to interconnect these locally distributed com- 
puter networks. Interconnection allows users to exchange information (data) with 
other network members. It also allows resource sharing of expensive equipment such 
as file servers and high-quality graphics printers, or access to more powerful com- 
puters for tasks too complicated for the local computer to process. The network com- 
monly used to accomplish this interconnection is called a local area network (LAN), 
which is a network of users that share computer resources in a limited area. 


1-2 NETWORK TOPOLOGIES 


Local area networks are defined in terms of the protocol and the topology used for Protocol 

accessing the network. The networking protocol is the set of rules established for Set of rules established for 
users to exchange information. The topology is the network architecture used to in- users to exchange 
terconnect the networking equipment. The most common architectures for LANs are İnformation 


the star, ring, and bus. Examples are shown in Figure 1-1. Topology 


Architecture of a network 


NETWORK TOPOLOGIES 
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Token-ring Topology 

A network topology 
configured in a logical ring 
that complements the token 
passing protocol 


Token Passing 

A technique where an 
electrical token circulates 
around a network—control 
of the token enables the 
user to gain access to the 
network 


IEEE 

Institute of Electrical and 
Electronics Engineers, one of 
the major standards-setting 
bodies for technological 
development 


Deterministic 

Access to the network is 
provided at fixed time 
intervals 


Token-ring Hub 

A hub that manages the 
passing of the token in a 
token-ring network 


Bus Topology 

The computers share the 
media (coaxial cable) for 
data transmission 


ThinNet 

A type of coaxial cable used 
to connect LANs configured 
with a bus topology 
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(a) Star network (b) Ring network 


(c) Bus network 


FIGURE 1-1 Network topologies. (From Modern Electronic Communication 9/e, by G. M. 
Miller & J. S. Beasley, 2008 Copyright © 2008 Pearson Education, Inc. Reprinted by 
permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


An example of a LAN configured using the token-ring topology is shown in 
Figure 1-2. In this topology, a “token” (shown as a T) is placed in the data channel 
and circulates around the ring, hence the name token-ring. If a user wants to transmit, 
the computer waits until it has control of the token. This technique is called token 
passing and is based on the IEEE 802.5 Token-Ring Network standard. A token-ring 
network is a deterministic network, meaning each station connected to the network 
is assured access for transmission of its messages at regular or fixed time intervals. 

One disadvantage of the token-ring system is that if an error changes the token 
pattern, it can cause the token to stop circulating. Additionally, ring networks rely on 
each system to relay the data to the next user. A failed station can cause data traffic to 
cease. Another disadvantage of the token-ring network is from the troubleshooting 
and maintenance point of view. The token-ring path must be temporarily broken (path 
interrupted) if a computer or any device connected to the network is to be removed or 
added to the network. This results in downtime for the network. A fix to this is to at- 
tach all the computers to a central token-ring hub. Such a device manages the pass- 
ing of the token rather than relying on individual computers to pass it, which improves 
the reliability of the network. 

The bus topology is shown in Figure 1-3. In a bus system the computers share 
the media (coaxial cable) for data transmission. In this topology, a coaxial cable 
(called ThinNet) is looped through each networking device to facilitate data transfer. 
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FIGURE 1-2 The token-ring network topology. 
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FIGURE 1-3 The bus topology. 
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Star Topology 

The most common 
networking topology in 
today’s LANs where all 
networking devices connect 
to a central switch or hub 


Hub 

Broadcasts the data it 
receives to all devices 
connected to its ports 


Multiport Repeater 
Another name for a hub 


Broadcast 

Transmission of data by a 
hub to all devices connected 
to its ports 


Switch 

Forwards a frame it receives 
directly out the port 
associated with its 
destination address 


Ports 

The physical input/output 
interfaces to the networking 
hardware 
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In a bus topology, all LAN data traffic is carried over a common coaxial cable 
link. Referring to Figure 1-3, if computer | 1s printing a large file, the line of com- 
munications will be between computer 1 and the printer. However, in a bus system, 
all networking devices will see computer 1’s data traffic to the printer, and the other 
devices must wait for pauses in transmission or until it is complete before they can 
initiate their own transmission. If more than one computer’s data is placed on the net- 
work at the same time, the data will be corrupted and must be retransmitted. This 
means that the use of a shared coaxial cable in a bus topology prevents data trans- 
mission from being very bandwidth-efficient. This is one reason, but not the only rea- 
son, why bus topologies are seldom used in modern computer networks. 

The star topology, shown in Figure 1-4, is the most common networking topol- 
ogy in today’s LANs. Twisted-pair cables (see Chapter 2) with modular plugs are 
used to connect the computers and other networking devices. At the center of a star 
network is either a switch or a hub. This connects the network devices and facilitates 
the transfer of data. For example, if computer | wants to send data to the network laser 
printer, the hub or switch provides the network connection. If a hub is used, computer 
1’s data is sent to the hub, which then forwards it to the printer. However, a hub is a 
multiport repeater, meaning the data it receives is broadcast to all devices con- 
nected to its ports. Therefore, the hub will broadcast computer 1’s data traffic to all 
networking devices interconnected in the star network. The data traffic path for this 
is shown in the solid black arrowed lines going to all networking devices in Figure 
1-4. This is similar to the bus topology in that all data traffic on the LAN is being seen 
by all computers. The fact that the hub broadcasts all data traffic to the devices con- 
nected to its network ports makes these devices of limited use in large networks, but 
hubs are sometimes still used in small, slower-speed LANs. 

To minimize unnecessary data traffic and isolate sections of the network, a 
switch can be used at the center of a star network, as shown in Figure 1-4. Network- 
ing devices such as computers each have a hardware or physical address. (This con- 
cept is fully detailed in section 1-3.) A switch stores the hardware or physical address 
for each device connected to its ports. The storage of the address enables the switch 
to directly connect two communicating devices without broadcasting the data to all 
devices connected to its ports. 

For example, if a switch is used instead of a hub, the data from computer 1 is 
transmitted directly to the printer, and the other computers do not see the data traffic. 
The traffic path for the switched network is shown in the dotted lines in Figure 1-4. 
The use of a switched connection greatly improves the efficiency of the available 
bandwidth. It also permits additional devices in the LAN to simultaneously commu- 
nicate with each other without tying up network resources. For example, while 
computer 1 is printing a large file, computers 5 and 6 can communicate with each 
other, as shown in the dashed line in Figure 1-4. For troubleshooting and maintenance, 
individual computers can be removed without negatively affecting the network in a 
star topology. Also the upgrade from a hub to a switched topology can be accom- 
plished without requiring a change in the cable infrastructure and therefore at minimal 
downtime and expense. 
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FIGURE 1-4 The star topology. 


Another topology is the mesh topology, shown in Figure 1-5. In this topology, Mesh Topology 
all networking devices are directly connected to each other. This provides for full re- All networking devices are 
dundancy in the network data paths but at a cost. The additional data paths increase directly connected to each 
the cabling costs and an increase in the networking hardware cost (for example, ex- other 
pense of multiple network ports for each device connected to the network). This 
topology can be suitable for high-reliability applications but can be too costly for gen- 
eral networking applications. 
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FIGURE 1-5 The mesh topology. 


1-3 THE ETHERNET LAN 


CSMA/CD The networking protocol used in most modern computer networks is Ethernet, a 
The Ethernet LAN media- CSMA/CD protocol for local area networks. It originated in 1972, and the full spec- 
access method, carrier sense ification for the protocol was provided in 1980 via a joint effort among Xerox, Digi- 
multiple access with tal Equipment Corporation, and Intel. CSMA/CD stands for “carrier sense multiple 


collision detection access with collision detection.” Basically, for a computer to “talk” on the Ethernet 


network, it first “listens” to see whether there is any data traffic (carrier sense). This 
means that any computer connected to the LAN can be “listening” for data traffic, and 
any of the computers on the LAN can access the network (multiple access). There is 
a chance that two or more computers will attempt to broadcast a message at the same 
time; therefore, Ethernet systems must have the capability to detect data collisions 
(collision detection). 

Packet The information in an Ethernet network is exchanged in a packet format. The 

Provides grouping of the packet provides grouping of the information for transmission that includes the header, 

information for transmission the data, and the trailer. The header consists of the preamble, the start frame delimiter, 
the destination and source addresses, and the length/type field. Next is the actual data 
being transmitted, followed by the pad that is used to bring the total number of bytes 
up to the minimum of 46 if the data field is less than 46 bytes. The last part of the frame 
is a4-byte CRC (cyclic redundancy check) value used for error checking. The structure 
of the Ethernet packet frame is shown in Figure 1-6 and described in Table 1-1. 
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Start Destination| Source este Frame 
Preamble | frame MAC MAC i A Data check 
delimiter | address address YP sequence 





FIGURE 1-6 The data structure for the Ethernet frame. (From Modern Electronic 
Communication 9/e, by G. M. Miller & J. S. Beasley, 2008. Copyright © 2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


TABLE 1-1 Components of the Ethernet Packet Frame 


Preamble An alternating pattern of 1s and Os used for 
synchronization. 

Start frame delimiter A binary 8-bit sequence of 10 1010 1 1 that indicates the 
start of the frame. 


Destination MAC Each computer has an Ethernet network interface card (NIC) 

address and Source or network adapter that has a unique media access control 

MAC address (MAC) address associated with it. The MAC address is 6 bytes 
(12 hex characters) in length. 

Length/type An indication of the number of bytes in the data field if this 


value is less than 1500. If this number is greater than 1500, 
it indicates the type of data format; for example, IP and 


IPX. 

Data The variable length of data being transferred from the 
source to the destination. 

Pad A field used to bring the total number of bytes up to the 


minimum of 46 if the data field is less than 46 bytes. 

Frame check sequence A 4-byte CRC (cyclic redundancy check) value used for error 
detection. The CRC is performed on the bits from the 
destination MAC address through the Pad fields. If an error 
is detected, the frame is discarded. 


The minimum length of the Ethernet frame is 64 bytes from the destination MAC address through the 
frame check sequence. The maximum Ethernet frame length is 1518 bytes, 6 bytes for the destination 
MAC address, 6 bytes for the source MAC address, 2 bytes for length/type, and 1500 bytes for the data. 


Source: Adapted from Modern Electronic Communication 9/e, by G. M. Miller & J. S. Beasley, 2008. 


Copyright © 2008 Pearson Education, Inc. Adapted by permission of Pearson Education, Inc., Upper Saddle ine i ~ Interface Card 
River, NJ. ( ) 


How are the destination and source addresses for the data determined within a The electronic hardware used 
LAN? Networked devices, such as computers and network printers, each have an A ae OCON PEEO 
electronic hardware interface to the LAN called a network interface card (NIC) 

(see Figure 1-7) or integrated network port. The NIC contains a unique network ad- MAC Address 
dress called the MAC address. MAC stands for “media access control.” The MAC A unique 6-byte address 
address is 6 bytes, or 48 bits, in length. The address is displayed in 12 hexadecimal assigned by the vendor of 
digits. The first 6 digits are used to indicate the vendor of the network interface, also the network interface card 
called the organizationally unique identifier (OUD), and the last 6 numbers form a Organizationally Unique 
unique value for each NIC assigned by the vendor. IEEE is the worldwide source of  tdentifier (OUI) 
registered OUIs. The first 3 bytes of the MAC 
address that identifies the 


manufacturer of the network 
hardware 
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FIGURE 1-7 A 3COM network interface card (courtesy of 3Com Corporation). 


Ethernet, Physical, The MAC address, also called the Ethernet, physical, hardware, or adapter 
Hardware, or Adapter address, can be obtained from computers operating under Microsoft Windows by 
Address typing the ipconfig /all command while in the command mode or at the MS-DOS 
a names for the MAC prompt. The following is an example of obtaining the MAC address for a computer 
address 


operating under Windows Vista or XP. 
The first step is to enter the command window by selecting Start and then Run. 


ipconfig /all l l i gaa 
Enables the: MAC address You will obtain the Run window as shown in Figure 1-8. Enter cmd as shown and 
information to be displayed click OK to open the command prompt. 


from the command prompt 


Type the name of a program, folder, document, or 
Internet resource, and Windows will open it For you, 





Open: | 2E] w 








FIGURE 1-8 The Run window used to enter the command prompt in Windows XP. 


In the command prompt, enter the ipconfig /all command as shown in Figure 
1-9. The /all switch on the command enables the MAC address information to be dis- 
played—for this example, the information for computer 1. Note that the Host Name 
for the computer is Computer-1. This information is typically established when the 
computer’s operating system is installed, but it can be changed as needed. This con- 
cept is presented in Chapter 14. The MAC address is listed under Ethernet adapter 
Local Area Connection as shown in Figure 1-9. The Media State—Media 
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disconnected text indicates that there is not an active Ethernet device, such as a hub 
or switch, connected to the computer. The Description lists the manufacturer and 
model of the network interface, and the Physical Address of 00-10-A4-13-99-2E is 
the actual MAC address for the computer. 


c\ C:\WINDOWS\System32\cmd.exe 


C:\>ipconfig Zall 
Windows IP Configuration 


Host Name : COMPUTER-1 
Primary Dns Suffix z 

Node Type : Broadcast 
IP Routing Enabled : No 

WINS Proxy Enabled 


Ethernet adapter Local Area Connection: 
Media State =: Media disconnected 


Description z: Intel¢R> PRO/166+ MiniPCI 
Physical Address : 66-16-A4-13-99-2E 





FIGURE 1-9 A typical text screen result when entering the ipconfig /all command in the 
command window. 


In some Windows operating systems, the winipcfg command can be used to 
display the Ethernet adapter information (see Figure 1-10). In this example, the ad- 
dress is listed as the Adapter Address. 


t IP Configuration Mk Es 
Ethernet Adapter Information 





Megahertz Ethernet Adapter. 


Adapter Address | 00-00-86-15-9E-74, 


IP Autocontiguration Address | 0.0.0.0 


Subnet Mask 0.0.0.0 


Default Gateway 


_Fieleage_| Renew | 
Release All Renew All | More Info >> | 





FIGURE 1-10 An example of the MAC address information obtained from a computer 
running under the Windows 98 operating system. 


Table 1-2 lists how the MAC address can be obtained for different computer 
operating systems. 
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TABLE 1-2 Commands for Obtaining the MAC Address for Different 
Operating Systems 


Operating System Command Sequence Comments 

Windows 95 Click Start—Run, type The Adapter Address is the MAC 
winipcfg, and press Enter. address. 

Windows 98 Click Start—Run, type The Adapter Address is the MAC 
winipcfg, and press Enter. address. 

Windows ME Click Start Run, type cmd, The Adapter Address is the MAC 
and then type ipconfig/all. address. 

Windows NT Click Start—Run and type The Physical Address is the MAC 


winipcfg. In the command address. 
prompt, type ipconfig/all 
and press Enter. 
Windows 2000 Click Start—Run and type The Physical Address is the MAC 
cmd. In the command address. 
prompt. type ipconfig/all, 
and then press Enter. 
Windows Vista/XP Click Start Run and type The Physical Address is the MAC 
cmd. In the command address. 
prompt type ipconfig/all, 
and then press Enter. 


Linux At the command prompt The HWaddr line contains the 
type ifconfig. MAC address. 

Mac OS (9.x and older) Click the Apple, and The Hardware Address is the MAC 
then select Control address. 


Panels—AppleTalk and 
click the Info button. 
Mac OS X Click Apple—About this The Hardware Address is the MAC 
MAC—more info— address. 
Network— Built-in Ethernet. 


In summary, the MAC address provides the information that ultimately enables 
the data to reach a destination in a LAN. This is also how computer 1 and the printer 
communicated directly in the star topology example using the switch (refer to Figure 
1-4). The switch stored the MAC addresses of all devices connected to its ports and 
used this information to forward the data from computer 1 directly to the printer. The 
switch also used the MAC address information to forward the data from computer 5 
to computer 6 (refer to Figure 1-4). 

MAC addresses are listed in hexadecimal (base-16). The complete MAC ad- 
dress consists of 12 hexadecimal digits. The first 6 digits identify the vendor. The last 
6 form a serial number assigned by the manufacturer of the network interface card. A 
searchable database of IEEE OUI and company ID assignments is available at 
http://standards.ieee.org/regauth/oui/index.shtml. Table 1-3 lists a few examples of 
MAC addresses. Also large companies may have many OUI numbers assigned to 
them. For example, the OUI 00-AA-00 is only one of Intel’s many OUIs. 
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TABLE 1-3 A Sample of MAC Addresses 


Company ID-Vendor Serial # Manufacturer (Company ID) 


00-AA-00-B6-7A-57 Intel Corporation (00-AA-00) 
00-00-86-15-9E-7A Megahertz Corporation (00-00-86) 
00-50-73-6C-32-11 Cisco Systems, Inc. (00-50-73) 
00-04-76-B6-9D-06 3COM (00-04-76) 
00-0A-27-B7-3E-F8 Apple Computer Inc. (00-0A-27) 


IP (Internet Protocol) Addressing 


The MAC address provides the physical address for the network interface card but IANA 
provides no information as to its network location or even on what LAN, or in which The agency that assigns IP 
building, city, or country the network resides. IP addressing provides a solution to addresses to computer 
worldwide addressing through incorporating a unique address that identifies the com- networks 
puter’s local network. IP network numbers are assigned by IANA (Internet Assigned 
Numbers Authority), the agency that assigns IP addresses to computer networks and 
makes sure no two different networks are assigned the same IP network address. The 
URL (Uniform Resource Locator) for [ANA is http://www.iana.org/. 

IP addresses are classified as either IPv4 or IPv6. IP version 4 (IPv4) is the cur- 1P Address 
rent TCP/IP addressing technique being used on the Internet. Address space for IPv4 Unique 32-bit address that 
is quickly running out due to the rapid growth of the Internet and the development of identifies on which network 
new Internet-compatible technologies. However, both IPv4 and IPv6 are being sup- the computer is located as 
ported by manufacturers of networking equipment and the latest computer operating well as differentiates the 
systems. The details about IPv6 are addressed in Chapter 5. IPv4 is currently the most computer from all other 
common method for assigning IP addresses. This text refers to IPv4 addressing as “IP devices on the same network 
addressing.” The IP address is a 32-bit address that identifies on which network the 
computer is located and differentiates the computer from all other devices on the 
same network. The address is divided into four 8-bit parts. The format for the IP ad- 
dress 1s 


A.B.C.D 


where the A.B.C.D values are written as the decimal equivalent of the 8-bit bi- 
nary value. The range for each of the decimal values is 0 to 255. IP addresses can be 
categorized by class. Examples of the classes of IP networks are provided in Table 
1-4. The address range for each class is provided in Table 1-5. 


TABLE 1-4 The Classes of IPv4 Networks 


Example Maximum 

Class Description IP Numbers Number of Hosts 
Class A Governments, very large 44.X.X.X. 2°4=16,777,214 

networks 
Class B Midsize companies, 128.123.x.x 216=65,534 

universities, and so on 
Class C Small networks 192.168.1.x 2°=254 
Class D Reserved for multicast groups 224.x.X.X not applicable 
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Network Number 

The portion of the IP address 
that defines which network 
the IP packet is originating 
from or being delivered to 


Host Number 

The portion of the IP address 
that defines the location of 
the networking device 
connected to the network; 
also called the host address 


Host Address 
Same as host number 


ISP 


Internet service provider 


Private Addresses 
IP addresses set aside for 
use in private intranets 


Intranet 

An internal network that 
provides file and resource 
sharing but is not accessed 
from the Internet 


IP Internetwork 

A network that uses IP 
addressing for identifying 
devices connected to the 
network 


TCP/IP 

Transmission Control 
Protocol/Internet Protocol, 
the protocol suite used for 
internetworks such as the 
Internet 


Wired Network 

Uses cables and connectors 
to establish the network 
connection 


Wireless Network 
Uses radio signals to 
establish the network 
connection 
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TABLE 1-5 The Address Range for Each Class of Network 


Class A 0.0.0.0 to 127.255.255.255 

Class B 128.0.0.0 to 191.255.255.255 
Class C 192.0.0.0 to 223.255.255.255 
Class D 224.0.0.0 to 239.255.255.255 


Examples of network addresses also are shown in Table 1-4. The decimal num- 
bers indicate the network number, which is the portion of the IP address that defines 
which network the IP packet is originating from or being delivered to. The x entries 
for each class represent the host number, which is the portion of the IP address that 
defines the address of the networking device connected to the network. The host num- 
ber is also called the host address. The network number provides sufficient infor- 
mation for routing the data to the appropriate destination network. A device on the 
destination network then uses the remaining information (the x portion) to direct the 
packet to the destination computer or host. The x portion of the address is typically 
assigned by the local network system administrator or is dynamically assigned when 
users need access outside their local networks. For example, your Internet service 
provider (ISP) dynamically assigns an IP address to your computer when you log on 
to the Internet. Remember, you can check the IP address assigned to your computer 
by your ISP using the ipconfig command in the command prompt. 

For this chapter and the rest of the text, a group of IP addresses called private 
addresses will be used for assigning IP addresses to networks. Private addresses are 
IP addresses set aside for use in private intranets. An intranet is an internal internet- 
work that provides file and resource sharing. Private addresses are not valid addresses 
for Internet use because they have been reserved and are blocked by the ISP. How- 
ever, these addresses can be used within a private LAN (intranet) to create an IP in- 
ternetwork. An IP internetwork uses IP addressing for identifying devices connected 
to the network and is also the addressing scheme used in TCP/IP networks. TCP/IP 
stands for Transmission Control Protocol/Internet Protocol and is the protocol suite 
used for internetworks such as the Internet. The three address blocks for the private 
IP addresses are as follows: 


10.0.0.0—10.255.255.255 
172.16.0.0-172.31.255.255 
192.168.0.0—192.168.255.255 


The topic of IP addressing will be examined in greater detail throughout the 
text. For Chapter 1, the objective is to use the IP addresses for configuring the address 
of the computers for operation in a TCP/IP network. 


1-4 ASSEMBLING A HOME NETWORK 


Setting up a home network is probably one of the first networks that the student sets 
up. This is an exciting opportunity for the student to demonstrate their knowledge of 
computer networks, but setting up the home network can also be quite a challenge. 
One of the first questions asked is, “Do I want to set up a wired or wireless home net- 
work?” A wired network uses cabling and connectors to establish the network con- 
nections. A wireless network uses radio signals to establish the network connection. 
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The following are advantages of a wired network: 


e Faster network data transfer speeds (within the LAN). 
e Relatively inexpensive to setup. 
e The network is not susceptible to outside interference. 


The following are disadvantages of the wired network: 


e The cable connections typically require the use of specialized tools. 
e The cable installation can be labor-intensive and expensive. 


Section 1-5 introduces setting up wired networks for both office and home networks; 
however, the home networking technologies are presented in this section. 

A wireless home network is probably the most common home network config- 
uration in use today. The advantages of a wireless network are many including the 
following: 


e User mobility 
e Simple installations 
e No cables 


Disadvantages of a wireless network can include 


e Security issues. 
e The data transfer speed within the LAN can be slower than wired networks. 


Wireless networks also go by the name Wi-Fi, which is the abbreviated name for the 
Wi-Fi Alliance (Wi-Fi stands for wireless fidelity). The Wi-Fi Alliance is an organi- 
zation whose function is to test and certify wireless equipment for compliance with 
the 802.11x standards, which is the group of wireless standards developed under 
IEEE 802.11. The most common wireless standards include 


e 802.1la (Wireless-A)—This standard can provide data transfer rates up to 
54 Mbps and an operating range up to 75 feet. It operates at 5GHz. 

e 802.11b (Wireless-B)—This standard can provide data transfer rates up to 
11 Mbps with ranges of 100 to 150 feet. It operates at 2.4 GHz. 

e 802.11g (Wireless-G)—This standard can provide data transfer rates up to 
54 Mbps up to 150 feet. It operates at 2.4 GHz. 

e 802.11n (Wireless-N)—This is the next generation of high-speed wireless con- 
nectivity promising data transfer rates up to 4 x 802.11g speeds (200+Mbps). 
It operates at 2.4 GHz. 


Figure 1-11 illustrates the placement and type of equipment found in a typical wired 
or wireless home network. Figure 1-11 (a) shows a wired LAN that is using cabling 
to interconnect the networking devices. A router is being used to make the connec- 
tion to the ISP. The router can also contain a switch and a broadband modem. The 
switch is used to interconnect other networking devices, and the broadband modem 
is used to make the data connection to the ISP. The most common broadband con- 
nections to the ISP are via a cable modem and DSL. In some cases the router, switch, 
and broadband modem will be separate devices, but most often they will be integrated 
into one device. One of the computers may also have the configuration settings for 
managing the router, which can include the settings for connecting to the ISP. 
Figure 1-11 (b) shows a wireless LAN that is being used to interconnect the net- 
working devices. A wireless router is being used to make the data connection to the 


Wi-Fi 

Wi-Fi Alliance—an 
organization that tests and 
certifies wireless equipment 
for compliance with the 
802.11x standards 


Wireless Router 

Device used to interconnect 
wireless networking devices 
and to give access to wired 
devices and establish the 
broadband Internet 
connection to the ISP 
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ISP, which is typically via a cable or DSL modem. The wireless router also has a wire- 
less access point and will typically have a switch to facilitate wired network connec- 
tions. Sometimes the broadband modem is integrated into the wireless router. The 
access point is used to establish the wireless network connection to each of the wire- 
less computers. Access points and specifics relative to their operation in wireless net- 
works are discussed in greater detail in Chapter 11. 









Wireless Router 
(Access Point/Switch/ 
Broadband Modem) 


Router + Switch + 
Broadband Modem 


(a) (b) 


FIGURE 1-11 An example of a (a) wired and (b) wireless WiFi home network. 


The components of a home network can include the following: 


e Hub—This is used to interconnect networking devices. A drawback to the hub 
is that it broadcasts the data it receives to all devices connected to its ports. The 
hub has been replaced by the network switch in most modern networks. Figure 
1-12 provides an image of a hub. 





FIGURE 1-12 Linksys EtherFast ® 8-Port 10/100 Auto-Sensing Hub (courtesy of Linksys). 
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e Switch—This is the best choice for interconnecting networking devices. It can 
establish a direct connection from the sender to the destination without passing 
the data traffic to other networking devices. Figure 1-13 provides an image of 
a switch. 





FIGURE 1-13 Linksys 24-Port 10/100/1000 Gigabit Switch (courtesy of Linksys). 


e Network Adapter—Wired and wireless network adapters are available. The 
type of network adapter used in desktop computers is called the Network 
Interface Card (NIC). Figure 1-14 provides an image of a wired network 
adapter. This type of NIC is inserted into an expansion slot on the computer’s 
motherboard and is a wired-only adapter. 





FIGURE 1-14 Linksys Instant Gigabit Network Adapter (courtesy of Linksys). 
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The PC Card adapter connects to notebook computers and provides an RJ-45 
jack for connecting to wired networks. RJ stands for registered jack. This de- 
vice supports connections to both 10 and 100 Mbps networks. Figure 1-15 pro- 
vides an image of a PC card adapter 





FIGURE 1-15 Linksys EtherFast® 10/100 32-Bit Integrated CardBus PC Card (courtesy of 
Linksys). 


The Wireless-N adapter inserts into a notebook or laptop computer PC Card 
slot. The Wireless-N technology offers a data transfer speed that is faster than 
Wireless-G and is also compatible with both Wireless-B and Wireless-G tech- 
nologies. Figure 1-16 provides an image of a Wireless-N adapter. 

Another option for connecting to networks is to use a network adapter that at- 
taches to a USB port on the computer. This device has the USB type A con- 
nector on one end and an RJ-45 jack on the other and will support connections 
to both 10, 100 Mbps, and 1000 Mbps data networks. Figure 1-17 provides an 
image of a USB network adapter. 

e Router—A networking device used to connect two or more networks (for ex- 
ample, your LAN and the Internet) using a single connection to your ISP. A 
modern home networking router can also contain a switch and a broadband mo- 
dem. Figure 1-18 provides an image of a router. 

e Access Point—Used to interconnect wireless devices and provide a connection 
to the wired LAN. The data transfer speeds for access points are dictated by the 
choice of wireless technology for the clients, but this device will support 
Wireless-N. Figure 1-19 provides an image of an access point. 
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FIGURE 1-16 Linksys Wireless-N Notebook Adapter (courtesy of Linksys). 





FIGURE 1-17 Linksys Compact USB 2.0 10/100 Network Adapter (courtesy of Linksys). 


e Wireless router—This device uses RF to connect to the networking devices. 
A wireless router typically contains a router, switch, and a wireless access point 
and is probably the most common way to interconnect wireless LANs to the 
ISP’s access device. Note that these devices also have wired network connec- 
tions available on the system. Figure 1-20 provides an image of a wireless 
router. 
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FIGURE 1-18 Linksys EtherFast® Cable/DSL Firewall Router with 4-Port Switch (courtesy 
of Linksys). 





FIGURE 1-19 The Linksys Wireless-N access point. 
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FIGURE 1-20 Linksys Wireless-G Broadband Router (courtesy of Linksys). 


e Broadband Modem/Gateway—This describes the device used to provide 
high-speed data access via your cable connection or via a telephone company’s 
DSL connection. A gateway combines a modem and a router into one network 
box. Figure 1-21 provides an image of a broadband modem/gateway. 

e Cable Modem—tThis device is used to make a broadband network connection 
from your home network to the ISP using your cable connection. This setup re- 
quires a splitter to separate the cable TV from the home network. Access to the 
Internet is typically provided by the cable TV service provider. Figure 1-22 pro- 
vides an image of a cable modem. 
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FIGURE 1-21 Linksys Wireless-G Cable Gateway (courtesy of Linksys). 





FIGURE 1-22 Linksys Cable Modem with USB and Ethernet Connections (courtesy of 
Linksys). 
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e DSL Modem— This device is used to make a broadband network connection 
from your home network to the ISP using the telephone line. Broadband access 
to the Internet is provided via the phone company or a separate ISP. The DSL 
connection requires the placement of filters on all telephone lines to prevent in- 
terference. Figure 1-23 provides an image of a DSL modem. 








FIGURE 1-23 Linksys ADSL2 Modem (courtesy of Linksys). 


Several issues should be considered when planning for a home network, in- 
cluding the following: 


e Data speed—tThis will be determined by whether you chose to implement a 
wired or wireless home network. Wired networks offer the best data transfer 
rate inside the home network, up to 1OGbps. The best data transfer rates for a 
wireless home network can be obtained using 802.11n (Wireless-N) technol- 
ogy. This is the next generation of high-speed wireless connectivity promising 
data transfer rates up to 4 x 802.11g speeds (200+ Mbps). 

e Cost—Implementing a high-speed wired network can be quite expensive. With 
the networking hardware, cabling, and related hardware, you can incur an un- 
expected additional cost for implementing the high-speed wired home network. 
The cost of switching to or implementing an 802.11n Wireless-N network is 
minimal and is a suitable alternative to a wired network. But remember, the 
maximum data rate for a Wireless-N network is still much lower than that pos- 
sible with a wired LAN. 

e Ease of implementation—A wireless home network is probably the easiest to 
implement if the cabling and connectors for a wired network are not already in- 
stalled. The time required to install the wireless home network is usually min- 
imal as long as unexpected problems do not surface. 

e Appearance—A wireless home network offers the best choice in regards to ap- 
pearance because there won’t be cables and networking hardware scattered 
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around the house. The wireless home network will require a wireless router and 
an external wired connection to the ISP (refer to Figure 1-11(b)). 

e Home access—The choice of wired or wireless technology will not affect 
home access. However, the wired network will offer the best data transfer speed 
internal to the network, but the wireless network offers the best choice for mo- 
bility. 

e Public access—The choice of wired or wireless technology will not impact 
public access. The data rate for the connection to/from the ISP will be the lim- 
iting factor for the data transfer rate for public access. 


It is not uncommon for a wired or wireless home network to stop functioning, al- 
though the downtime is usually minimal. The steps for troubleshooting wired and 
wireless home networks include the following: 


Step 1 Check to make sure the proper lights for your networking device that con- 
nects you to your ISP are properly displayed. Incorrect lights can indicate a 
connection problem with your cable modem, DSL modem, or telephone 
connection. Your ISP might also be having a problem, and you might need 
to call them to verify your connection. 

Step 2 One of the first steps usually used to fix basic connection problems to the 
ISP is to reboot the host computer (the computer connected to the router) 
and to reboot the router. This usually will fix the problem, and the correct 
lights should be displayed. In some cases, you might also have to power 
down/up your broadband modem. (Note that the broadband modem might 
be integrated with the router.) Once again, check to see whether the correct 
lights are being displayed. 

Step 3 You should always verify your hardware cable or phone connection is in 
place and has not been pulled loose. Make corrections as needed. You should 
also verify that all wireless units have a network connection. The following 
are steps to verify wireless connectivity for Windows Vista, Windows XP, 
and MAC OS X: 

e Windows Vista: Click Start—Network Connections or click Start— 
Control Panel—Network and Sharing Center. The wireless connec- 
tion will show enabled if there is a wireless connection. 

e Windows XP: Right-click My Network Places. The computer will in- 
dicate whether there is a wireless network connection. 

e MAC OS X: Click the Apple icon—System Preferences—Network. If 
you are connected: 

e A green AirPort icon is displayed, and the words “airport is con- 
nected to network” appear. 

e A yellow icon indicates that AirPort is turned on but is not con- 
nected to a network. 

e A red icon indicates AirPort is turned off. 

Also note that if you are connected to a wireless network, a radio wave icon 

will appear at the top of the screen in the menu bar to indicate you are con- 
nected to a wireless network. 

Step 4 Sometimes you might need to verify your network settings. This can happen 
if your computer has lost the data for the settings. In this case, follow the 
steps provided by the manufacturer of your broadband modem or your ISP. 
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The following are the basic steps for establishing the wireless connection for a wire- 
less notebook computer running Windows Vista, XP, and MAC OS X: 


e Windows Vista: Click Start—Settings—Network Connections and then 
right-click Wireless Network Connection. You might need to click Enable 
and/or Connect/Disconnect to establish a wireless connection. A red X indi- 
cates a wireless connection is not established. 

e Windows XP: This can vary depending on your wireless card. Click Start— 
Programs and select the setup program for your wireless card. Follow the steps 
displayed on the screen to establish a wireless network connection. You will 
need to know the name of the network you want to join as well as the SSID. 
The SSID is the Service Set Identifier and is used to identify what wireless de- 
vices are allowed to connect to the network. 

e MAC OS X: Click the Apple icon—System Preferences—Network, and then 
click Show—Network Status—Connect—Turn AirPort on. Close the Air- 
Port window and click Configure—By default join a specific network. Enter 
the wireless network name (SSID) and password (WEP code), and then click 
Apply Now. A radio wave should now appear at the top of the screen in the 
menu bar, which indicates the network is connected. 


There are many choices of wireless technologies for configuring a wireless network. 
The 802.11b, g, and n (Wireless-B, -G, and -N) technologies are compatible even 
though they offer different data speeds. If compatible but different wireless tech- 
nologies are being used, the data transfer speeds will be negotiated at the rate speci- 
fied by the slowest technology. For example, the 802.11n (Wireless-N) standard 
offers a faster data rate (comparable to Wireless-G), but when devices of both tech- 
nologies are present, the data transfer rate will be negotiated at the Wireless-G data 
rate. 

In some cases, the wireless signal might not be reaching all the areas that need Range Extender 
coverage. In this case, a device called a range extender can be used. This device re- Device that relays the 
lays the wireless signals from an access point or wireless router into areas witha weak Wireless signals from an 
signal or no signal at all. This improves the wireless remote access from all pointsin access point or wireless 
the home. This same technology can also be used to improve connectivity in stores bene me ee mora WEAK 
and warehouses and can also be used to provide excellent connectivity in public BIg a a 
places such as hotspots. Hotspots are defined as a limited geographic area that pro- Hotspots 
vides wireless access for the public. Hotspots are typically found in airports, restau- A limited geographic area 


rants, libraries, and schools. that provides wireless access 
for the public 


Securing the Home Network 


There are many potential security issues associated with a wireless network. Secur- 
ing the home wireless network is extremely important because a wireless signal can 
be intercepted by the wrong person, and they can possibly connect to your network. 
The following are some basic steps that can be used to help protect the home network. 


1. Change the default factory passwords. Wireless equipment is shipped with 
default passwords that are set at the factory. These default settings are known 
by the public, including people who would like to gain access into your net- 
work and possibly change your settings. It is best that you select your own pass- 
word that is a combination of alphanumeric characters. 
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Service Set Identifier 
(SSID) 

Name that is used to identify 
your wireless network and is 
used by your access point or 
wireless router to establish 
an association 


. Change the default SSID. The SSID is the name used to identify your network 


and is used by your access point or wireless router to establish an association. 
Establishing an association means that a wireless client can join the network. 
The SSID can be up to 32 characters and should be changed often so hackers 
who have figured out your SSID will no longer have access to your home net- 
work. 


. Turn encryption on. Probably the most important thing to do is turn on the se- 


curity features that include data encryption. These options include Wired 
Equivalent Privacy (WEP) and Wi-Fi Protected Access (WPA) and WPA2. 
WPA2 is a product certification issued by the Wi-Fi Alliance. It uses a stronger 
encryption than WPA and is also backward compatible with adapters using 
WPA. 


. Turn off the SSID broadcast. Wireless systems broadcast the SSID so that the 


network can be easily identified as an available network. Hackers can use this 
information to possibly gain access to your network, so it is a good idea to turn 
off the SSID broadcast. The exception to this is in hotspots where public access 
is available. Please note, hotspots make it easy for the user to gain wireless ac- 
cess but hackers can also be on the same network, so it is very important to have 
encryption turned on. 


. Enable MAC address filtering. All computer devices use a unique MAC ad- 


dress for identifying the device. This can be used to select what devices can be 
allowed access to the network. When MAC address filtering is turned on, only 
wireless devices that have specific MAC addresses will be allowed access to the 
network. 


Another important security concern is limiting outside access to your home network 
via your connection to the ISP. The following are some things that can be done to pro- 
tect the home network from outside threats: 


e Network Address Translation: The outsider sees only the router IP address 


Firewall Protection 

Used to prevent 
unauthorized access to your 
network 


Stateful Packet 
Inspection (SPI) 

Type of firewall that inspects 
incoming data packets to 
make sure they correspond to 
an outgoing request 


Virtual Private Network 
(VPN) 

Establishes a secure network 
connection and is a way to 
protect your LAN’s data from 
being observed by outsiders 
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because the IP addresses of the internal networking devices are not provided on 
the Internet. Only the [SP-assigned IP address of the router is provided. The 
home network typically uses a private address that is not routable on the 
Internet. (Private IP addresses are blocked by the ISP). 

Firewall protection: A common practice is to turn on the firewall protection. 
The purpose of a firewall is to prevent unauthorized access to your network. 
Firewall protection is available in both the Windows and MAC operating envi- 
ronments. A type of firewall protection is Stateful Packet Inspection (SPI). 
This type of firewall inspects incoming data packets to make sure they corre- 
spond to an outgoing request. For example, you may be exchanging informa- 
tion with a website. Data packets that are not requested are rejected. The topic 
of firewalls is covered in more detail in Chapter 10, “Network Security.” 
Establish a VPN connection when transferring sensitive information: A 
Virtual Private Network (VPN) establishes a secure network connection and 
is a way to protect your LAN’s data from being observed by outsiders. The 
VPN connection capability is available with Windows Vista, Windows XP, and 
MAC OS X. A VPN connection enables a remote or mobile user to access the 
network as if they were actually physically at the network. Additionally, the 
VPN connection is encrypted, providing privacy for the data packets being 
transmitted. 


IP Addressing in the Home Network 


A common question asked about home networks is, “How is IP addressing handled Network Address 
for all the computers connected to the Internet?” The home network typically has Translation (NAT) 
only one connection to the ISP, but multiple computers can be connected to the In- Translates the private IP 
ternet at the same time. The answer is that IP addressing for the home network is man- address ice a public address 
aged by the router or wireless router that connects to the ISP. The ISP will issue an Or TONAN OVE tne: Mirene 
IP address to the router from an available pool of IP addresses managed by the ISP. 
The computers in the home network should be issued private IP addresses (applica- 
ble ranges are 10.0.0.0-10.255.255.255; 172.16.0.0-172.31.255.255; 192.168.0.0- 
192.168.255.255) using a technique called Network Address Translation (NAT). 
An example is provided in Figure 1-24. A routable public IP address is issued 
by the ISP for the wireless router. This public IP address enables all computers in the 
home network access to the Internet. The wireless router issues private addresses to 
all computers connected to the network. 





The wireless computers (1 and 2) will use 
private IP address that are assigned 
by the wireless router. 





Wireless Router 
(Access Point/Switch/ 
Broadband Modem) 





FIGURE 1-24 A home network using a wireless router connected to the ISP. 


NAT translates the private IP address to a public address for routing over the In- | Overloading 
ternet. For example, computer 1 in the home network (see Figure 1-24) might estab- Where NAT translates the 
lish a connection to an Internet website. The wireless router uses NAT to translate ome network's private IP 
computer 1’s private IP address to the public IP address assigned to the router. The hve a single public 
router uses a technique called overloading, where NAT translates the home net- 
work’s private IP addresses to the single public IP address assigned by the ISP. Inad- Port Address 
dition, the NAT process tracks a port number for the connection. This technique is Translation (PAT) 
called Port Address Translation (PAT). The router stores the home network’s IP ad- A port number is tracked 
dress and port number in a NAT lookup table. The port number differentiates the com- with the client computer's 
puter that is establishing a connection to the Internet because the router uses the same private address when 
address for all computers. This port number is used when a data packet is returned to translating to a public 
the home network. The port number identifies the computer that established the In- address 
ternet connection, and the router can deliver the data packet to the correct computer. 
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For example, if computer | establishes a connection to a website on the Inter- 
net, the data packets from the website are sent back to computer | using the home net- 
work’s routable public IP address. This first step enables the data packet to be routed 
back to the home network. Next, the router uses the NAT lookup table and port num- 
ber to translate the destination for the data packet back to the computer 1 private IP 
address and original port number, which might be different. Figure 1-25 demonstrates 
an example of the NAT translation process for a home network. The home network 
has been assigned Class C private IP addresses (192.168.0.x) by the router. The x is 
a unique number (from 1—254) assigned to each computer. The router translates the 
private IP addresses to the public routable IP address assigned by the ISP. Addition- 
ally, the router tracks a port number with the public IP address to identify the com- 
puter. For example, the computer with the private IP address of 192.168.0.64 is 
assigned the public IP address 128.123.246.55:1962, where 1962 is the port number 
tracked by the router. 


192.168.0.64 128.123.246.55 : 1962 
192.168.0.65 128.123.246.55 : 1970 


192.168.0.66 Roulé 128.123.246.55 : 1973 


192.168.0.1 


FIGURE 1-25 The NAT translation using PAT. 


1-5 ASSEMBLING AN OFFICE LAN 


An example of assembling an office-type LAN is presented in this section. The Eth- 
ernet protocol will be used for managing the exchange of data in the network. The 
networking devices will be interconnected in a star topology. There are many options 
for assembling and configuring a LAN, but this example presents a networking ap- 
proach that is simple and consistent with modern computer networking. It will also 
provide a good introduction to the networking topics presented in the text. 

For this example, three computers and one printer are to be configured in the 
star topology. Each device in the network will be assigned an IP address from the pri- 
vate address space. The following step-by-step discussion guides you through the 
process of assembling, configuring, and testing an office LAN: 


Step 1 The first step in assembling an office LAN is to document the devices to be 
connected in the network and prepare a simple sketch of the proposed net- 
work. Each device’s MAC and IP addresses should be included in the net- 
work drawing documentation. 

Figure 1-26 provides an example of a small office LAN. The desired IP ad- 
dresses and the actual MAC addresses for each computer and printer are 
listed. Remember, each NIC contains a unique MAC address and the IP ad- 
dresses are locally assigned by the network administrator. The MAC 
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addresses were obtained by entering the ipconfig /all command from the 
command prompt in Windows XP. Repeat this step for all computing de- 
vices connected to the LAN. The results of the MAC address inquiries are 
provided in Table 1-6. Each networking device will be assigned an IP ad- 
dress. Table 1-6 also lists the planned IP addresses of the devices used in this 
office LAN. 


MAC Address OO0-10-A4-13-99-2E 
IP Address 10.10.10.1 









CAT6 cable 


CAT6 cable 





fe) | OO} 
Switch 









Laser printer 


MAC Address OO-10-83-OB-A6-2F 
IP Address 10.10.10.20 


CAT6 cable 


MAC Address OO0-10-A4-13-6C-6E 
IP Address 10.10.10.2 


MAC Address 00-B0-D0-25-BF-48 
IP Address 10.10.10.3 


FIGURE 1-26 An example of a small office LAN star topology. 


TABLE 1-6 The MAC and Assigned IP Address for the Devices in the 


Office LAN 

Device (Hostname) MAC Address IP Address 

Computer 1 00-10-A4-13-99-2E 10.10.10.1 

Computer 2 00-10-A4-13-6C-6E 10.10.10.2 

Computer 3 00-B0-D0-25-BF-48 10.10.10.3 

Laser Printer 00-10-83-0B-A6-2F 10.10.10.20 
Note 


In this text, you will function as the network administrator. The network administrator 
must know how to obtain all IP and MAC address information for devices connected to the 
network. This requires that the network administrator keep good documentation of the 
network. 


Step2 Connect all the networking devices using the star topology shown in 
Figure 1-26. 
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At the center of this star topology network will be a switch or a hub. Recall 
that either can be used to connect the networking devices. The switch is the 
best choice because the hub broadcasts data it receives to all devices con- 
nected to its ports, and the switch enables the devices to communicate di- 
rectly. Although hubs are not as sophisticated as switches and are not 
reflective of modern computer networking, the hub is still suitable for use in 
small networks. 


CAT6 (category 6) The connections from the switch to the computers and the printer will be 
Twisted-pair cables capable made using premade twisted-pair patch cables. The cable type used here is 
of carrying up to 1000 Mbps CAT6 (category 6) twisted-pair cable. CAT6 twisted-pair cables have RJ- 


(1 gigabit) of data up toa 


45 modular connectors on each end, as shown in Figure 1-27, and are capa- 
length of 100 meters 


ble of carrying 1000 Mbps (1 gigabit) or more of data up to a length of 100 


RJ-45 meters. The twisted-pair media and its various category specifications are 
The 8-pin modular connector discussed in Chapter 2. If the network hardware and software are properly 
used with CAT6/5e/5 cable set up, all computers will be able to access the printer and other computers. 

Issues associated with the proper cabling including CAT 6/Se are addressed 
Mbps in Chapter 2. 


Megabits per second 





FIGURE 1-27 The RJ-45 twisted-pair patch cables (courtesy of StarTech.com). 


Numerics The media used for transporting data in a modern computer network are e1- 

A numerical representation ther twisted-pair or fiber optic cables. The principles behind selecting, in- 
stalling, and testing twisted-pair cabling are presented in Chapter 2. Table 
1-7 lists the common numerics used to describe the data rates for the 
twisted-pair media and the older style copper coaxial cable used in a LAN. 
Common numerics for fiber optic LANs are also listed. Numerics are an al- 
phanumeric description of a technology. For example, /OOBaseT means that 
this is a 100-Mbps, baseband, twisted-pair technology. 


TABLE 1-7 Common Numerics for Ethernet LAN Cabling 


Numeric Description 

10Base2 10 Mbps over coaxial cable up to 185 m, also called ThinNet (seldom 
used anymore) 

10Base5 10 Mbps over coaxial cable up to 500 m, also called ThickNet (seldom 
used anymore) 

10BaseT 10 Mbps over twisted pair 

10BaseF 10 Mbps over multimode fiber optic cable 

10BaseFL 10 Mbps over 850 nm multimode fiber optic cable 

100BaseT 100 Mbps over twisted pair (also called Fast Ethernet) 

100BaseFX 100 Mbps over fiber 
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Numeric Description 


1000BaseT 1000 Mbps over twisted pair 
1000BaseFX 1000 Mbps over fiber 
10GE 10 Gigabit Ethernet 


Source: Adapted from Modem Electronic Communication 9/e, by G. M. Miller & J. S. Beasley, 2008. 
Copyright© 2008 Pearson Education, Inc. Adapted by permission of Pearson Education, Inc., Upper Sad- 
dle River, NJ. 


The RJ-45 plugs connect to the switch inputs via the RJ-45 jacks. Figure Ports 

1-28 shows a simple 8-port switch. The inputs to the switch are also called The interface for the 
the input ports, which are the interfaces for the networking devices. The networking devices 
switch inputs that are marked with an “x” [Figure 1-28(b)] indicate that 
these devices are cross-connected, meaning the transmit and receive pairs on 
the twisted-pair cable are crossed to properly align each for data communi- 
cation. The term for a cable that has cross-connected TX/RX data lines 1s 


Crossover 

Transmit and receive signal 

pairs are crossed to properly 
align the transmit signal on 
crossover. one device with the receive 

Signal on the other device 


RJ-45 Jack 





X 
(cross-connected input) 


(a) (b) 


FIGURE 1-28 (a) The switch used to connect the networking devices; (b) closeup view of 


rT LA 


x” input (courtesy of Anixter Inc.). 


Figure 1-29(a) provides an example of this cross-connected concept. Straight-through 
Switches usually have at least one port that can be switched or selected for Transmit and receive signal 
use as either a cross-connected or straight-through input. A straight-through Pairs are aligned end-to-end 
port is also called an uplink port. The uplink port allows for the connection Uplink Port 

of a switch to a switch or a hub without having to use a special cable. De- Alons the comeco oa 
vices requiring the cross-connected input port are computers, printers, and bub or switch to another hub 
routers. Devices requiring a straight-through connection are uplink connec- or switch without havin g to 
tions to other switches or hubs. Figure 1-29(b) provides a block diagram ex- use a crossover cable 
plaining the concept of a straight-through input. 


A networking connection can be verified by examining the link light on the Link Light 

switch or hub. The presence of a link light indicates that the transmit and re- Indicates that the transmit 

ceive pairs are properly aligned and the connected devices are communicat- and receive pairs are properly 

ing. Absence of the light indicates a possible cabling or hardware problem. aligned 

The Ethernet protocol can use the link integrity test to verify that a com- Link Integrity Test 

munication link between two Ethernet devices has been established. The Protocol used to verify that 

link light remains lit when communication is established and remains litas a communication link 

long as there is a periodic exchange of link pulses from the attached devices. between two Ethernet 
devices has been established 
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Link Pulses Link pulses are sent by each of the connected devices via the twisted-pair 


Sent by each of the cables to indicate that the link is up, but the link pulses are not part of the 
connected devices via the Ethernet packet and are sent at regular intervals when data is not being 
twisted-pair cables when transmitted. 


data is not being transmitted 
to indicate that the link is 
still up 





(a) (b) 


FIGURE 1-29 (a) An example of the wiring on an “x” type input on a hub; (b) an 
example of straight-through wiring. 


Step 3 Configure the IP address settings on each computer according to the as- 
signed addresses provided in Table 1-6. 


The following describes how the network administrator configures the computers to 
operate on the LAN. This requires that each computing device be assigned an IP ad- 
dress. The assigned IP addresses for this LAN are provided in Table 1-6. Examples 
of configuring the computers in the office LAN using Windows Vista, Windows XP, 
and MAC OS X follow. A printer is also attached to the network and setup for print- 
ers is discussed later in the text. 


e Windows Vista: Click Start—Network Connection or click Start—Control 
Panel—Network and Sharing Center. Right-click Local Area Connection 
and select Properties, and then click Continue. This opens the Local Area 
Connection Properties menu. Double-click Internet Protocol Version 4 
(TCP/IPv4). This opens the Properties menu. Now select Use the following 
IP address, enter the IP address and subnet mask, and click OK. 

e Windows XP: To set the IP address in Windows XP, click Start—Settings— 
Control Panel and click Network Connections. Right-click Local Area 
Connection, and then click Properties. You should see the Local Area 
Connection Properties menu. Make sure the TCP/IP box is checked and the 
words Internet Protocol TCP/IP are highlighted (selected). Click the 
Properties button. You should now see the Internet Protocol (TCP/IP) 
Properties menu. At this point you must specify whether the IP address is to 
be obtained automatically or if you are to use a specified (static) address. For 
this example click Use the following IP address. Type the desired IP address 
and subnet mask and select OK. 

e MAC OS X: Click Apple—System Preferences—Network, and then click 
Network Status and select Built-In Ethernet. A new screen should appear 
and with the option Configure IPv4; select Manually. This option lets you 
manually set the IP address and subnet mask. Fields should now be displayed 
for inputting both the IP address and subnet mask. Enter the desired IP address 
and subnet mask and select Apply Now. 
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The IP addresses and subnet mask being used in the office LAN example are listed in 
Table 1-6. The IP address for computer 1 is 10.10.10.1, and in this example, a subnet 
mask of 255.255.0.0 is being used. Subnet masking is examined in detail in Chap- 
ter 5. For now, leave the remaining fields empty; their purpose will be discussed later 
in the text. Your network configuration for computer 1 should now be complete. 
These steps are repeated for computers 2 and 3 in this LAN example. 


1-6 TESTING AND TROUBLESHOOTING A LAN 


When the network configurations on the computers are completed and the cable con- 
nections are in place, you will need to test and possibly troubleshoot the network. 
First, verify that the computers are properly connected on the network. Do this by ver- 
ifying that you have link lights on each switch port that is connected to a computer or 
other networking device. Link verification will typically appear as a lit link light. An 
example of a switch with the link light activated is shown in Figure 1-30. 





FIGURE 1-30 An example of the link light on a hub. 


Once you have verified that the networking devices are physically connected to- 
gether, use the ping command to verify that the networking devices are communicating. 
Ping stands for Packet Internet Groper that uses ICMP (Internet Control Message 
Protocol) echo requests and replies to test that a device on the network is reachable. The 
ICMP protocol verifies that messages are being delivered. The ping command is avail- 
able in the command window of Windows to verify the networking devices are com- 
municating. The command structure for the ping command is as follows: 


Usage ping[-t][-a][-n count)[-1 size][-f -i TTL][-v TOS] [-r count][-s 


count] 

[[-j host-list]:[-k host-list][-w timeout] destination-list 

Options 

-t Ping the specified host until stopped 
To see statistics and continue, type Control-Break 
To stop, type Control-C 

-a Resolve addresses to host-names 

-n count Number of echo requests to send 

-1 size Send buffer size 

-f Set Don't Fragment flag in packet 

-I TTL Time To Live v TOS Type Of Service 

r count Record route for count hops 


Ping (Packet Internet 
Groper) 


Command used to test that a 


device on the network is 
reachable 


ICMP 
Internet Control Message 
Protocol 
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s count Timestamp for count hops 

j host-list Loose source route along host-list 

k host-list Strict source route along host-list 

w timeout Timeout in milliseconds to wait for each reply 


For example, the command ping 10.10.10.1 is used to ping the IP address for 
computer |. The IP address 10.10.10.1 is the destination address. Another example 
would be the destination IP address for computer 3; in this case ping 10.10.10.3 
would be used. (Refer to Table 1-6 and Figure 1-26 for the IP addresses of the com- 
puters in our sample network.) 

The following is an example of pinging another computer on the network to 
verify that the computers are communicating. In this example, computer | is used to ping 
computer 2. Remember, the ping command is executed from the command window. 


ping 10.10.10.2 
Pinging 10.10.10.2 with 32 bytes of data: 
Reply from 10.10.10.2: bytes 32 time<ims TTL 128 
Reply from 10.10.10.2: bytes 32 time<ims TTL 128 
Reply from 10.10.10.2: bytes 32 time<ims TTL 128 
Reply from 10.10.10.2: bytes 32 time<ims TTL 128 
Ping statistics for 10.10.10.2: 
Packets: Sent = 4, Received = 4, Lost = @ (0% loss), 

Approximate round trip times in milli-seconds: 

Minimum = Oms, Maximum = @ms, Average = Oms 


The text shows that 32 bytes of data are being sent to the computer with the IP ad- 
dress of 10.10.10.2. The “Reply from 10.10.10.2” indicates that computer 2 received 
the message. The type of data packets being sent are explained in section 1-7. If the 
computer at IP address 10.10.10.2 did not respond, the message “Request timed 
out.” is displayed: 


ping 10.10.10.2 

Pinging 10.10.1@.2 with 32 bytes of data: 
Request timed out. 

Request timed out. 

Request timed out. 

Request timed out. 


Ping statistics for 10.10.10.2: 
Packets: Sent = 4, Received = @, Lost= 4 
(100% loss), 


ipconfig At times you may want to verify the IP address of the computer you are working on. 
Command used to display Remember, a method of obtaining the IP address is to enter the command ipconfig at 
the computer's address the command prompt. It is not necessary to include the /all switch after the ipconfig 


command unless you also want the MAC address information displayed. Figure 1-31 
shows an example of displaying the IP address for computer 1. 
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Windows IP Configuration 

Ethernet adapter Local Area Connection: 
Connection-specific DNS Suffix .: 
IP Address.............10.10.10.1 
subnet MasKk............ 255.255.0.0 
Default Gateway .........: 


(a) 





10/2/07 2:26 PM 





Configuration Name A| Interface Type IP Address 
AirPort enl AirPort 128.123.244.53 
Bluetooth Bluetooth-Modem PPP (PPPSerial) 

Built-in Ethernet end Ethernet 10.10.20.1 
Internal Modem modem PPP (PPPSerial) 


| Built-in Ethernet: 


. Interface: en0 
Type: Ethernet 
IP Address: 10.10.20.1 
Subnet Mask: 255.255.255.0 


Broadcast Address: 10.10.20.255 
Ethernet Address: 00:0d:93:c2:d8:74 








(b) 


FIGURE 1-31 (a) An example of displaying the IP address for computer 1 using the 
ipconfig command in Windows and (b) an example of the displayed IP address in MAC OS X 
for the Built-in Ethernet connection. 


1-7 ANALYZING COMPUTER NETWORKS 


Each chapter in this text includes a section on configuring, analyzing, or trou- 
bleshooting computer networks. The purpose of these additions to each chapter is to 
provide a thorough examination of networking concepts. The objective of this section 
in Chapter 1 is to introduce the techniques for using a protocol analyzer to examine 
how networking packets are exchanged in a TCP/IP network. The TCP/IP protocol is 
examined in detail in Chapter 5, “TCP/IP.” You will actually be able to develop an un- 
derstanding of the protocols being used and packets being transferred prior to study- 
ing the theory behind the protocols. 

The CD-ROM included with the text contains the Finisar Surveyor Demo v9.0 
protocol analyzer. The Surveyor Demo software includes many advanced features for 
packet capture and analysis. The capabilities of this software will help you gain a 
thorough understanding of packet transfers and networking protocols. Additionally, 
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you will gain an introductory understanding of the capabilities and techniques for us- 
ing a sophisticated software protocol analyzer. The protocol analyzer has the capa- 
bility to capture and decode data packets and allows the user to inspect the packet 
contents. This enables the user to investigate how information is being transferred in 
the network. Additionally, the information provided by the protocol analyzer enables 
the user to detect, identify, and correct network problems. You are guided through the 
steps of using the Surveyor protocol analyzer. 

In this section, the packets transferred in the process of pinging a computer are 
examined. This exercise is based on the exercise presented in section 1-6 and uses the 
IP and MAC addresses specified in Table 1-6. The following steps guide you through 
installing and using the Surveyor Demo software on a Windows computer or a MAC 
with a dual-core Intel processor and a Windows emulator. Place the text’s Compan- 
ion Networking CD-ROM in your computer. Open the contents of the CD-ROM and 
the Finisar file folder. You should see a file named SetupSurveyorDemo- 
9.0.0.62051.exe. Double-click this executable file to initiate setup. Use the default di- 
rectory paths specified in the setup menu. You are ready to begin using the software 
once the installation is complete. 

In the first example, you will examine packets that have been previously 
captured. 


Step 1 In Windows, Click Start—All Programs—Finisar Surveyor Demo to 
start the surveyor program. The procedure for starting the Finisar Surveyor 
Demo protocol analyzer is the same fora MAC OS X operating in the dual- 
boot mode with XP. 

Step 2 Click File—Open, select your CD-ROM drive, and select the Finisar file 
folder. Double-click the Ch1-6.cap file to open the file. You might see a 
screen that says, “You can see only 250 frames in the Demo version.” Click 
OK to begin. This statement is letting you know that you are seeing a lim- 
ited number of data packets on your network. This is a suitable limitation 
relative to the concepts presented in the text. 


Note 


Click the Capture View button at the bottom of the Surveyor Demo—Detail View screen. 
The button is shown in Figure 1-32. 


4 |> |\ Capture View A Overview Á Servers Á Transactions Alssues AClients / 


FIGURE 1-32 The Capture View button on the Surveyor Demo Detail View screen. 


Once you click the Capture View button, you should see the captured packets 
on your screen. Figure 1-33 shows the detail view screen. In this example, the infor- 
mation on the screen is showing the transfer of packets that occurs when one com- 
puter pings another. In this case, computer 1 pinged computer 2. Recall that the MAC 
addresses and assigned IP addresses for computer | and computer 2 are listed in Table 
1-6 and in Figure 1-26. The MAC and IP addresses are listed again for your reference: 


Name MAC Address IP Address 
Computer 1 00-10-A4-13-99-2E 10.10.10.1 
Computer 2 00-10-A4-13-6C-6E 10.10.10.2 
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The Bounce Chart displayed on the right side of the Detail View screen is show- 
ing that an ARP request broadcast was sent from computer 10.10.10.1, and computer 
10.10.10.2 replied back with its IP address. You can click Capture Views—Appli- 
cation Bounce Chart to close the bounce chart. 


iim Surveyor Demo - Detail View - [C:\Documents and Settings\Administrator Desktop\Network CDROM\Finisar\Ch1 -6.cap - 10 MBPS - ( 10 frames total ) ... ER 
z File Edit Configuration View Module Monitor Views Capture Views Tools Window Help = | o x 


SH-S=\S@i\ in B-«- So 


MWK dr WTO Oe Display Filter: | >| \¥ afk # 


BookMark | Status | Elapsed [sec] | Sie | Destination | Source | Summar 
a fT 462.226.3204 BROADCAST | 10, 10.10.1 | ARP O PA=10,10.10.2 


000001 0.462.769.400 64 10,10,10,1 10,10,10,2 ARP R HA=001044136C6E 











10,10,10,2 
10,10,10,1 
10,10,10.2 
10,10,10,1 
10,10,10.2 
10,10,10,1 
10,10,10,2 
10,10,10,1 


10,10,10.1 
10,10,10,2 
10,10,10.1 
10,10,10,2 
10,10,10,1 
10,10,10.2 
10,10,10,1 
10,10,10,2 


ICMP Echo Request 
ICMP Echo Reply 
ICMP Echo Request 
ICMP Echo Reply 
ICMP Echo Request 
ICMP Echo Reply 
ICMP Echo Request 
ICMP Echo Reply 


000002 0.462.787.000 78 
000003 0.463.071.400 78 
000004 1.464.289.720 78 
000005 1.464.630.560 78 
000006 2,465,437 080 78 
000007 2,465,843 .000 78 
000008 3.466.680.240 78 
000009 3.466.993.120 78 





Frame ID 0, arrived at 01/13 21:38:13.462226, Frame Status: 
(Good Frame) 


Detail View 





E 


Data Link Control 
(DLC 


Source 
EtherType 





FFFFFFFFFFFF 
00104413992E 
0x0806 


[BROADCAST] 
[Xircom - 13992E] [Xircom 13992E] 
(Address Resolution Protocol (ARP)) 





FIGURE 1-33 The captured packets showing the ping from computer 1 to computer 2. 


In this example, a ping command is issued from computer | to computer 2. The 
structure of the command issued by computer 1 at the command prompt is 


ping 10.10.10.2 


As shown in Frame ID (FID) 000000 in Figure 1-33, computer 1 issues an ARP 
request on the LAN. ARP stands for “Address Resolution Protocol,” which is a pro- 
tocol used to map an IP address to its MAC address. The source of the packet is 00- 
10-A4-13-99-2E (computer 1). The destination address on the local area network 
shown is BROADCAST, which means this message is being sent to all computers on 
the network. A query (Q) being asked is who has the IP address 10.10.10.2 (PA). 

The highlighted area (FID 000001) in Figure 1-34 shows computer 2 replying 
with its MAC address back to computer 1. This is called an ARP reply, which is a 
protocol where the MAC address is returned. The source of the ARP reply is from 00- 
10-A4-13-6C-6E (computer 2), which is replying that the MAC address for 
10.10.10.2 is 00-10-A4-13-6C-6E (HA). In this case, the owner of the IP address 
replied to the message. 


ii Surveyor Demo - Detail View - [C:\Documents and Settings\AdministratorDesktop\Network CDROM\Finisar\Ch1-6.cap - 10 MBPS - ( 10 frames total ) ... ER) 
=| File Edit Configuration View Module Monitor Views Capture Views Tools Window Help -| 8| xX 





AEE EEE 


A id i 4 b> OD ODI 7 @@ |Z | Display Filter: | -| ERF 
| FID | BookMark | Status | Elapsed[sec] | Size | Destination | Source | Summa 


000000 0,462,226,320 64 BROADCAST 10,10,10,1 ARP Q PA=10,10,10.2 
a Yh nE E METETE 

000002 0.462.787.000 78 10.10.10.2 10,10,10.1 ICMP Echo Request 

000003 0,463,071,400 10,10,10.1 10,10,10.2 ICMP Echo Reply 

000004 1,464,289.720 10,10,10.2 10,10,10,1 ICMP Echo Request 

000005 1,464,630.560 10,10,10.1 10,10,10.2 ICMP Echo Reply 

000006 2.465 487,080 10,10,10.2 10,10,10.1 ICMP Echo Request 

000007 2,465,843,000 10.10.10.1 10,10,10.2 ICMP Echo Reply 

000008 3,466,680,240 10,10,10.2 10,10,10.1 ICMP Echo Request 

000009 3.466.993.120 10,10,10.1 10,10,10.2 ICMP Echo Reply 








Frame ID 1, arrived at 01/13 21:38:13.462769, Frame Status: 
(Good Frame) 


Detail View 





— Data Link Control 
(DLC) 

Source 

EthertType 














0010A413992E [Xircom - 13992E] [Xircom 13992E] 
0010A4136C6E [Xircom - 136C6E] [Xircom 136C6E] 
oxoso6 (Address Resolution Protocol (ARP)) 








FIGURE 1-34 Computer 2 replying with its MAC address back to computer 1. 


Address Resolution 
Protocol (ARP) 

Used to map an IP address 
to its MAC address 


ARP Reply 
A network protocol where 
the MAC address is returned 
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Echo Request 

Part of the ICMP protocol 
that requests a reply from a 
computer 
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Figure 1-35 shows computer | sending an echo request directly to computer 2. 
An echo request is the part of the ICMP protocol that requests a reply from a com- 
puter. Notice in the echo request that the destination address is 00-10-A4-13-6C-6E 
(computer 2’s MAC address), and the source is 00-10-A4-13-99-2E (computer 1’s 
MAC address). Recall that computer 1 now knows the MAC address for IP address 
10.10.10.2 so the ping request can be sent directly. In this step, computer 1 uses the 
ICMP ping command to verify network connectivity. The highlighted area in Figure 
1-36 (FID 000003) shows computer 2’s echo reply. This series of echo requests and 
replies repeats three more times for a total of four cycles. 


ii Surveyor Demo - Detail View - [C:\Documents and Settings\Administrator Desktop\Network CDROM\Finisar\Ch1-6.cap - 10 MBPS - ( 10 frames total ) ... ER) 
=| File Edit Configuration View Module Monitor Views Capture Views Tools Window Help =| 8| X 





AREL EEE 


id i od b> OD Dil >r © @ Z| Display Fitter: | -| BANE i 
[FID | BookMark | Status | Elapsed[sec] | Size | Destination | Source | Summa 


000000 0.462.226.320 64 BROADCAST 10,10,10,1 ARP Q PA=10,10,10.2 
000001 0.462.769.400 64 10,10,10,1 10,10,10.2 ARP R HA=0010A4136C6E 
ooooo2 ToO oOo O J ë ë | 0.462.787.000 10,10,10.2 10,10,10.1 ICMP Echo Request 


000003 0.463.071.400 78 10.10.10.1 10.10.10.2 ICMP Echo Reply 








000004 1.464.289.720 78 10.10.10.2 10,10,10,1 
000005 1,464,630,.560 78 10,10,10,1 10,10,10,2 
000006 2.465.487.080 10.10.10.2 10.10.10.11 
000007 2.465.843.000 10.10.10.1 10.10.10.2 
000008 3.466.680.240 10.10.10.2 10,10,10,1 
000009 3.466.993.120 10,10,10,1 10,10,10,2 


ICMP Echo Request 
ICMP Echo Reply 
ICMP Echo Request 
ICMP Echo Reply 
ICMP Echo Request 
ICMP Echo Reply 








Detail View 





Frame ID 2, arrived at 01/13 21:38:13.462787, Frame Status: 
(Good Frame) 





Data Link Control 
CDLC 


0010A4136C6E [Xircom - 136C6E] [Xircom 136C6E] 
Source 0010A413992E [Xircom - 13992E] [Xircom 13992E] 
EthertType 0x0800 (Internet Protocol (IP)) 











FIGURE 1-35 Computer 1 is sending an echo request to computer 2. 


fim Surveyor Demo - Detail View - [C:\Documents and Settings\Administrator Desktop\Network CDROM\Finisar\Ch1-6.cap - 10 MBPS - ( 10 frames total ) ... aR 
=| File Edit Configuration View Module Monitor Views Capture Views Tools Window Help - ox 


SH-% = % Sm |. Bx -So 


A M M 4 > H AT @ @ |Z) Display Fiter:| ~| |# RS 
| FD | BookMark | Status | Elapsed(sec] | Size | Destination | Source | Summ 


000000 0.462.226.320 64 BROADCAST 10,10,10.1 ARP Q PA=10,10,10.2 
000001 0.462.769.400 64 10,10,10.1 10,10,10.2 ARP R HA=001084136C6E 
000002 0.462.787.000 78 10,10,10,2 10,10,10,1 ICMP Echo Request 
Es a T E 10,10,10.1 
000004 1.464.289.720 78 10,10,10.2 10,10,10.1 ICMP Echo Request 
000005 1,464,630.560 10,10,10,1 10,10,10.2 ICMP Echo Reply 
000006 2.465.487.080 10,10,10.2 10,10,10.1 ICMP Echo Request 
000007 2.465 ,843,000 10.10,10,1 10,10,10.2 ICMP Echo Reply 
000008 3,466 ,680,240 10,10,10,2 10,10,10,1 ICMP Echo Request 
000009 3.466.993.120 10,10,10,1 10,10,10.2 ICMP Echo Reply 











Lit 








Detail View 








Frame ID 3, arrived at 01/13 21:38:13.463071, Frame Status: 
(Good Frame) 





Data Link Control 

(DLC) 
0010A413992E [xXircom - 13992E] [xircom 13992E] 
Source 0010A4136C6E [Xircom - 136C6E] [Xircom 136C6E] 
EthertType 0x0800 (Internet Protocol (IP)) 

















FIGURE 1-36 The echo reply from computer 2. 


The first exercise with the Surveyor Demo software demonstrated how to use 
the protocol analyzer to inspect captured packets. In most cases the user will want to 
capture data packets from their own network. The following steps describe how to use 
the software to capture packets. 


Step 1 In Windows, click Start—Programs—Finisar—Surveyor Demo— and 
select Finisar Surveyor Demo to start the surveyor program. 
To capture packets on an operating network, you can either click Module— 
Start as shown in Figure 1-37 or click the green arrow under the Monitor 
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Views button as shown in Figure 1-38. You should see activity on your 
Cap+Mon screen as shown in Figure 1-39. The lines in the Cap+Mon win- 
dow show the network utilization and the network errors, of which there are 
currently none. 


14) Surveyor Demo - //Local/NDIS 802.3 Module (1) (Monitor Mode) 
File Configuration View MG@@MEM Remote Host Tools Window Help 
Detail View ... F9 





Monitor View Preferences 
H-E Resource Browser Settings... 


a-fe 128.123.246. Load Capture Filter... 
MH NDIS 802.3 





v Apply Capture Filter To Monitor 
Unload Capture Filter 
Load Transmit File... 
Active Transmit Specifications and Capture Filter 


Start Ctrl+T 
Stop Ctrl+P 
Schedule Capture... 

Lock 


Unlock 


tt) | | oe «lo oa || 


Mode Of Operation 
Interface 
Interface Mode 
Fiber Link 
Identify... 
Alarms... 








FIGURE 1-37 Initializing the Surveyor Demo to capture data packets from your network. 


Location of Green Arrow to Start Capture 


fi Surveyor Demo - Detail View - [ //Local/NDIS 802.3 Module (1) ] 


File Configuration View Module Monillor Views Capture Views Tools Window Help 


& | |i Bx lm ses 

















-— 


Utilization/Errors Strip Chart (RX) 
BWA | MONITOR [100 MBPS | 00:00:06 | MII AUTO 











CAP+MON 100 MBPS 00:00:48 MII AUTO is te 97 } 512 KB 
Buffer 





FIGURE 1-39 An example of network activity as displayed on the Surveyor Demo screen 
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Step 2 To examine the packets, stop the simulation by clicking the red Stop button 
or by clicking Module—Stop. The overview screen will be displayed after 
the capture is stopped. You might see a screen that says, **You can see only 
250 frames in the DEMO version. All but the last 250 packets will be 
blocked without the full release version of Finisar Surveyor.” Click OK 
to begin. Click the Capture View tab at the bottom left of the overview 
screen to view the captured data packets. The captured data packets should 
now be displayed. Remember, there must be some activity on your network 
for packets to be transferred. You may see little traffic activity if your net- 
work is in the lab and there is limited network activity. You can always use 
the ping command to generate some network data activity if needed. 
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SUMMARY 


Chapter | introduced the basic concepts of computer networking. The technologies 
and techniques for assembling a computer network using the Ethernet protocol have 
been presented. The student should now understand the following major topics: 


e The various LAN topologies 

e The concept of CSMA/CD in the Ethernet protocol 

e The structure of the Ethernet frame 

e The purpose of the network interface card 

e The purpose of the MAC address 

e How to determine the MAC address for a computer 

e The purpose and structure of the IP address 

e The concept of private IP addresses 

e The network topologies and technologies used to implement twisted-pair com- 
puter networks 

e How to configure and verify a computer’s IP address 

e How to configure a home network and an office LAN 

e The purpose of the link light 

e The purpose of using ping to test a network connection 

e Using a protocol analyzer to examine simple network data traffic 


QUESTIONS AND PROBLEMS 


Section 1-1 


1. State whether the following network descriptions are describing a MAN, WAN, 
or LAN: 
a. A network of users that share computer resources in a limited area 
b. A network of users that share computer resources across a metropolitan 
area 
c. A network that connects local area networks across a large geographic 
area 
Expand the acronym NIC. 
Expand the acronym MAC. 
Expand the acronym LAN. 
Expand the acronym WAN. 


i ale ca a 


Section 1-2 


6. Define the term protocol. 
7. Define the term topology. 
8. Define the term deterministic. 
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9. A disadvantage of the token-ring system is that if an error changes the token 
pattern, it can cause the token to stop circulating. This can be eliminated by 
adding a 

a. Router 
b. Multiport repeater 
c. Token passer 
d. Token-ring hub 
10. State the network topology being used in the following figure (Bus, Star, Ring, 
or Mesh). 





a. 
b. 
Č: 


d. 
11. What is the difference between a hub and a switch? 


Section 1-3 


12. Define the acronym CSMA/CD and the protocol that uses CSMA/CD. 
13. What information is not included in an Ethernet frame? 

a. Frame size 

b. Source MAC address 

c. Pad 

d. Frame check sequence 


14. What is the minimum size of the data payload in an Ethernet frame? 
15. What is the minimum and maximum size of an Ethernet frame? 
16. Define the acronym OUI. Where is the OUI used? 
17. What does the OUI represent? 
18. In Windows Vista or Windows XP, how would you find the Ethernet (MAC) 
address? 
19. INTERNET SEARCH: Find the device manufacturer for the following Ether- 
net devices: 
a. OO-CO-4F-49-68-A B— 
b. 00-0A-27-B7-3E-F8— 
c. 00-04-76-B6-9D-06— 
d. O00-00-36-69-42-27— 
20. State the class of address (A, B, or C) for the following IP addresses: 
a. 46.39.42.05— 
220.244.38.168— 
198.1.0.4— 
126.87.12.34— 
99.150.200.25 1— 
f. 128.64.32.16— 
21. Expand the acronym TCP/IP. 


of of 


Section 1-4 


22. Cite the three advantages of a wired network. 

23. Cite three advantages of a wireless network. 

24. What does it mean for a wireless networking device to be Wi-Fi compliant? 

25. What are the most common types of equipment that are used to establish a 
broadband connection to the ISP? 

26. Name six issues that should be considered when planning a home network? 

27. Why is checking the lights of the networking device that connects to the ISP 
important? 

28. What is the purpose of a range expander? 

29. What is a hotspot? 

30. List five steps that can be used to protect the home network. 

31. You have the choice of selecting a networking device with WEP and another 
with WPA. Which offers better security and why? 

32. What are the potential problems of using the default factory passwords? 

33. What is the purpose of the SSID, and what can the network administrator do to 
protect the network from hackers who might have learned the SSID? 

34. What is the purpose of MAC filtering on a wireless network? 

35. How does NAT (Network Address Translation) help protect outsider access to 
computers in the home network? 

36. What is Stateful Packet Inspection? 

37. What is a VPN, and how does it protect the data transferred over a wireless 
network? 

38. How is IP addressing typically handled in a home network? 
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39. What is Port Address Translation (PAT)? 

40. A router on a home network is assigned an IP address of 128.123.45.67. A com- 
puter in the home network is assigned a private IP address of 192.168.10.62. 
This computer is assigned the public IP address 128.123.45.67:1922. Which IP 
address is used for routing data packets on the Internet? Is overloading being 
used? 
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41. Which of the following is not a step in building an office LAN? 
a. Obtaining proper government permits 
b. Configuring the network settings 
c. Connecting the devices together 
d. Network documentation 
42. What does RJ-45 represent? 
a. A 45-pin connector for CAT6 
b. An IEEE standard for data speed 
c. An 8-pin modular connector for twisted pair Ethernet 
d. Protocol used to verify a communications link 
43. What is an uplink port? 
44. What is the maximum speed and length for Category 6 cabling? 
45. What do the link lights on a hub represent? 
46. What does cross-connected mean? 
47. Documentation: Draw a network diagram similar to Figure 1-26 consisting of 
3 computers, a switch, and a printer. Use the MAC addresses given in Table 
1-6. Assign each network device an IP address from the private address space 
192.168.5.x network. You are the network administrator and may choose the 
host address for each device. 


MAC Address: 00-10-A4-13-99-2E 
IP Address: 192.168.5.1 
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MAC Address: 00-10-A4-13-6C-6E 
IP Address: 192.168.5.2 


- CAT6 cable 























MAC Address: 00-B0-D0-25-BF-48 
IP Address: 192.168.5.3 
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Section 1-6 


48. What command would you use to ping 10.3.9.42 indefinitely? 

49. What command would you use to ping 192.168.5.36 20 times with 1024 bytes 
of data? 

50. Expand the acronym TTL. 


Section 1-7 


51. Expand the acronym ARP. 

52. What is the purpose of an ARP request? 
53. Expand the acronym ICMP. 

54. What is an echo request? 

55. What is the purpose of a protocol analyzer? 


Critical Thinking 


56. In terms of computer security, a switch offers better security than a hub. Why 
is this? 
Included on the Companion CD-ROM in the Finisar capture file folder is a network 
packet capture file called Packetla.cap. Open this file in the Finisar-Shomiti Sur- 
veyor Demo program. The following five questions refer to this file. 


57. What are the MAC addresses of the computers involved? 
58. Which IP addresses correspond to each MAC address? 
59. Which packet IDs correspond to ARP requests? 

60. Which packet IDs correspond to ARP replies? 

61. Which computers are pinging which computers? 
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CHAPTER OUTLINE 


2-1 Introduction 

2-2 Structured Cabling 

2-3 Unshielded Twisted-Pair Cable 

2-4 Terminating CAT6/Se/5 UTP Cables 
2-5 Cable Testing and Certification 


OBJECTIVES 


Describe the six subsystems of a structured 
cabling system 


Define horizontal cabling 
Define UTP and STP 
Define the categories of UTP cable 


Describe the difference in the T568A and 
T568B wire color order 


Describe the procedure for placing RJ-45 
plugs and jacks on twisted-pair cable 


2-6 10 Gigabit Ethernet over Copper 
2-7 Troubleshooting Computer 
Networks 

Summary 

Questions and Problems 


Describe how to terminate twisted-pair cable 
for computer networks 


Define the basic concepts for planning a cable 
installation for an office LAN 


Describe the procedure for certifying a 
twisted-pair cable for CAT6 and CATSe 


Describe the issues of running 10 gigabit 
Ethernet over copper 


Describe the basic steps for troubleshooting 
cable problems 


KEY TERMS 
physical layer intermediate cross-connect patch cable 
EIA (IC) UTP 
TIA Cross-connect CAT6/6a 
campus network horizontal cross-connect CATS5/e 
EIA/TIA 568-B (HC) balanced mode 
building entrance MDF (Main Distribution FastEthernet 


entrance facilities (EF) 
equipment room (ER) 
telecommunications closet 
TR 

backbone cabling 
horizontal cabling 

TCO 

work area 

main cross-connect (MC) 


Frame or Main Equipment 
Room) 


network congestion 


CD (Campus Distributor) bottlenecking 
BD (Building Distributor) een 
FD (Floor Distributors) gigabit Ethernet 
CAT7/7a and CAT6a 
WO (workstation or work 
area outlet) 1OGBASE-T 
TO (telecommunications STP 
outlet) EMI 
terminated T568A 
SPSC continues 
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KEY TERMS continued 


T568B 
color map 
TX 

RX 


straight-through 
cable 


wire-map 
crossover cable 
link 

full channel 


attenuation (inser- 
tion loss) 


near-end crosstalk 
(NEXT) 


crosstalk 
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power sum NEXT 
(PSNEXT) 


equal level FEXT 
(ELFEXT) 


PSELFEXT 

ACR 

PSACR 

return loss 
propagation delay 
nominal velocity of 
propagation (NVP) 
delay skew 

pair data 


IEEE 802.3an-2006 
10GBASE-T 


10GBASE-T 
Alien Crosstalk 
(AXT) 
PSANEXT 
PSAACRF 
F/UTP 

TCL 

ELTCTL 

LCL 

TCTL 
PSANEXT 
PSAACRF 
multilevel encoding 


hybrid echo cancel- 
lation circuit 


2-1 INTRODUCTION 


This chapter examines the twisted-pair media used to link computers together to form 
a local area network (LAN). This is called physical layer cabling. The term physical 
layer describes the media that interconnects networking devices. The objective of this 
chapter is for the reader to gain an introductory understanding of the cable media in- 
cluding the category types, the steps for terminating cables, cable testing, certifica- 
tion, and troubleshooting. The main focus will be on the use of unshielded 
twisted-pair (UTP) cable in computer networks, although an overview of shielded 
twisted-pair (STP) is presented. Fiber optic cables are playing a very important role 
in modern computer networks and are not overlooked in this text. This media is thor- 
oughly examined in Chapter 12. 

This chapter begins with an overview of the concept of structured cabling. This 
section defines the six subsystems of a structured cabling system and focuses on the 
basic issues associated with horizontal cabling or wiring a LAN. Next, the basic op- 
erational characteristics of unshielded twisted-pair (UTP) cable are examined. The 
discussion includes an examination of the various categories of UTP cable currently 
available. Next is an overview of constructing twisted-pair patch and horizontal link 
cabling. The tools and techniques for properly terminating UTP cabling for both 
CAT®6 and CATS5e are presented. An introduction to testing and certifying CAT6 and 
CATSe cables follows. This section includes several examples of cable test data and 
how to interpret the test results. The chapter concludes with a section on trou- 
bleshooting computer networks, with a focus on the cable or physical layer failures. 


2-2 STRUCTURED CABLING 


The first major standard describing a structured cabling system for computer net- 
works was the TIA/EIA 568-A in 1995. EIA is the Electronics Industries Alliance, a 
trade organization that lobbies for the interests of manufacturers of electronics- 
related equipment. TIA stands for the Telecommunications Industry Association, 
which is a trade organization that represents the interests of the telecommunications 
industry. The most important addendum to the EIA/TIA 568-A standard was Adden- 
dum 5, published in 1999. This addendum defined the transmission performance 
specifications for 4-pair 100-ohm category 5e twisted-pair cabling. TIA/EIA adopted 
new category 6 (CAT6) cable specifications in June 2002. This is the type of cabling 
recommended for use in today’s computer networks, although CAT7 twisted-pair ca- 
bling may soon become the recommended standard. 

The EIA/TIA 568-A standard defined the minimum requirements for the inter- 
nal telecommunications wiring in buildings and between structures in a campus net- 
work. A campus network consists of interconnected LANs within a limited 
geographic area such as a college campus, a military base, or a group of commercial 
buildings. The EIA/TIA 568-A was revised and updated many times, and in 2000 a 
new standard, the EIA/TIA 568-B was published. The three parts of the EIA/TIA 
568-B are as follows: 


e EIA/TIA-568-B.1: Commercial Cabling Standard, Master Document 
e EIA/TIA-568-B.2: Twisted-pair Media 
e EIA/TIA-568-B.3: Optical Fiber Cabling Standard 


Physical Layer 
Describes the media that 
interconnects networking 
devices 


EIA 


Electronic Industries Alliance 


TIA 


Telecommunications Industry 


Association 


Campus Network 
Interconnected LANs within 
a limited geographic area 


EIA/TIA 568-B 

The standard that defines 
the six subsystems of a 
structured cabling system 
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Building Entrance 
Entrance Facilities (EF) 
Equipment Room (ER) 
Backbone Cabling 
Telecommunications 
Closet 

TR 

Horizontal Cabling 

TCO 

Work Area 


Main Cross-connect (MC) 
Usually connects two or 
more buildings and is 
typically the central 
telecommunications 
connection point for a 
campus or building. It is 
also called the Main 
Distribution Frame (MDF) 
or Main Equipment Room. 
The MC connects to telco, an 
ISP, and so on. Another term 
for the MC is the campus 
distributor (CD). 


Intermediate Cross- 
connect (IC) 

Also called the building 
distributor (BD) and is the 
building’s connection point to 
the campus backbone. The IC 
links the MC to the horizontal 
cross-connect (HC). 
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Within the EIA/TIA 569B Commercial Standard for Telecommunication Pathways 
and Spaces are guidelines defining the six subsystems of a structured cabling system: 


L. 


A 


Note 


Building Entrance: The point where the external cabling and wireless services 
interconnects with the internal building cabling in the equipment room. This is 
used by both public and/or private access (for example, Telco, satellite, cable 
TV, security, and so on). The building entrance is also called the entrance fa- 
cilities (EF). Both public and private network cables enter the building at this 
point, and typically each has separate facilities for the different access 
providers. 

Equipment Room (ER): A room set aside for complex electronic equipment 
such as the network servers and telephone equipment. 


. Telecommunications Closet: The location of the cabling termination points 


that includes the mechanical terminations and the distribution frames. The con- 
nection of the horizontal cabling to the backbone wiring is made at this point. 
This is also called the telecommunications room (TR) or telecommunications 
enclosure (TE). 


One room can serve as the entrance facility, equipment room, and the telecommunications 


closet. 


4. 


Backbone Cabling: Cabling that interconnects telecommunication closets, 
equipment rooms, and cabling entrances in the same building and between 
buildings. 


. Horizontal Cabling: Cabling that extends out from the telecommunications 


closet into the LAN work area. Typically, the horizontal wiring is structured in 
a star configuration running to each area telecommunications outlet (TCO). 
This is the wall plate where the fiber or twisted-pair cable terminates in the 
room. In some cases, the TCO terminates telephone, fiber, and video in addi- 
tion to data into the same wall plate. 

Work Area: The location of the computers and printers, patch cables, jacks, 
computer adapter cables, and fiber jumpers. 


Figure 2-1 provides a drawing of the structure for a telecommunications cabling sys- 
tem. In the figure, it shows the connection of the carriers (Telco, ISP, and so on) com- 
ing into the equipment room (ER). The ER is the space set aside for the carrier’s 
equipment contained in the main cross-connect (MC) or intermediate cross- 
connect (IC). The entrance facility (EF) consists of the cabling, connector hardware, 
protection devices that are used as the interface between any external building ca- 
bling, and wireless services with the equipment room. This area is used by both pub- 
lic and private access providers (for example, Telco, satellite, cable TV, security, and 
so on). The ER and EF space is typically combined with the MC equipment room. 


Building 1 


Intrabuilding 


Backbone Cabling 





Building 2 
Interbuilding 
Backbone Cabling 


ER & EF 


Building 3 


Interbuilding 


Backbone Cabling Intrabuildi 
ntrabuilding 


Backbone Cabling 









Telco, ISP, 
Cable TV, etc. 
Intrabuilding 
Backbone Cabling 
FIGURE 2-1 The telecommunications Cabling System Architecture. 


Between the main cross-connect (MC) and the intermediate cross-connect (IC) 
are the campus backbone cabling (listed as the interbuilding backbone cabling). This 
defines the connections between the MC and IC. A definition of a cross-connect is a 
space where you are going to take one or multiple cables and connect them to one or 
more cables or equipment. For example, you could be bringing in 60 UTP cables, 50 
could be cross-connected to a switch and 10 cross-connected to a backbone cable go- 
ing to another location. Typical connections between the MC and IC are single-mode 
and multimode fibers and possibly coax for cable TV, although most installations are 
migrating to fiber. The building backbone cabling (intrabuilding backbone cabling) 
makes the connection between the IC and the TC/HC. TC is the telecommunications 
closet and HC is the horizontal cross-connect (HC). Usually this connection is 
CATS UTP or better, or possibly single- or multimode fiber or some combination. 
Fiber is the best choice for making these connections, although copper is sometimes 
used. The horizontal cabling is the cabling between the HC and the work area. It is 
usually CATS UTP or better or fiber. The standard currently specifies CAT6. Fiber is 
gaining acceptance for connecting to the work area outlets (WO). 

Figure 2-2 provides a more detailed view of the cabling from the main cross- 
connect (MC) to the intermediate cross-connect (IC) and the horizontal cross-connect 
(HC). This drawing shows the three layers of the recommended backbone hierarchy 
cabling for a computer network. The first level of the hierarchy is the MC. The MC 
connects to the second level of the hierarchy, the IC. The backbone cabling connects 
the MC to the IC and the IC to the telecommunications closet (TC)/HC. The HC con- 
nects the horizontal cabling to the work area and to the workstation outlets (WO). 
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Cross-connect 

A space where you are going 
to take one or multiple 
cables and connect them to 
one or more cables or 
equipment 


Horizontal Cross-connect 
(HC) 

The connection between the 
building distributors and the 
horizontal cabling to the 
work area or workstation 
outlet—another term used 
for the HC is the floor 
distributors (FD) 


Workstation or Work 
Area Outlet (WO) 

Also called the TO 
(telecommunications outlet), 
it’s used to connect devices 
to the cable plant. The cable 
type typically used is CAT3, 
CAT5, CAT5e, CAT6, CAT6A, 
and various coaxial cables. 
Devices typically connected 
to these outlets are PCs, 
printers, servers, phones, 
televisions, and wireless 
access points. 
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Legend 


MC Main Cross-Connect 
IC Intermediate Cross-Connect 


HC Horizontal Cross-Connect 
Campus WO Workstation Outlet 
Back-bone 
Cabling 
Backbone Cabling 
Building 
Back-bone 
Cabling 
—_ 
Horizontal 
Cabling 


FIGURE 2-2 The Campus Network Hierarchical topology 





The focus of this chapter is on the issues associated with the horizontal cabling 
and the work area (LAN) subsystems. The text addresses all six subsystems of a struc- 
tured cabling system, but at the point when the networking concepts and related hard- 
ware are introduced. Many of the concepts covered in each structured cabling 
subsystem require that the reader have a firm grasp of basic networking to gain a full 
appreciation of how each network piece fits into a structured cabled system. 


Horizontal Cabling 


Permanent network cabling within a building is considered to be horizontal cabling, 
defined as the cabling that extends out from the telecommunications closet into the 
LAN work area. Take time to plan for your horizontal cabling installation because 
this is where your network interfaces with the users. There is always a substantial in- 
stallation cost associated with horizontal cabling, and there is an even greater cost of 
having to replace or upgrade a cable installation. You don’t want to have to recable 
your system very often. Careful attention should be given to planning for the hori- 
zontal cabling of a LAN. Make sure you fully understand your current networking 
needs and that your proposed plan meets the needs. Also make sure your plan ad- 
dresses future needs and growth of your network. 

Figure 2-3 illustrates the basic blocks of a horizontal cabling system from the 
telecommunications closet to the computer in the LAN. The following components 
are typically found in the telecommunications closet: 


Backbone cabling interconnecting this closet with other closets 
Switch or hub 

Patch panels 

Patch cables 

Cabling to the LAN (horizontal cabling) 

Wall plate 

Patch cable connecting the computer to the wall plate 


AOnmuawny 
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FIGURE 2-3 Block diagram of a horizontal cabling system. 


Item E in Figure 2-3 shows the cabling leaving the telecommunications closet. Terminated 
The cable extends to where it is terminated at the wall plate (item F) in the LAN or Describes where the cable 
work area. The term terminated describes where the cable connects to a jack in a wall connects to a jack or a patch 
plate, a patch panel, or an RJ-45 modular plug. In this case, the cable terminates into panel 
an RJ-45 jack in the wall plate. Figure 2-4 provides an example of the RJ-45 wall 
plate and patch panel. 


Note 


The proper term for the RJ-45 modular plug used in computer systems is actually 8P8C for 8P8C 
both male and female connectors. 8P8C stands for 8-pin 8-conductors and is defined by 
ANSI/TIA-968-A and B but is commonly called RJ-45 by both professionals and end users. 


The correct name for the 
modular 8-pin, 8-connector 


SA À computer connectors—the 
An individual cable is used to connect each connector in the outlet to the patch common term is RJ-45 


panel in the telecommunications closet (F to E). RJ-45 (8P8C) plugs and jacks are 
defined in section 2-4. 
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FIGURE 2-4 The Ortronics clarity twisted-pair system (courtesy of Ortronics). 


Patch Cable In a star topology, there is an individual cable run for each outlet in the wall 
Cabling (often twisted-pair) plate. This means that you assign one computer to each terminated outlet. A patch 
used to make the physical cable (item G) is used to make the physical connection from the computer to the wall 
connection between plate as shown in Figure 2-3. A patch cable is a short cable used to make the physi- 


networking equipment cal connection between networking equipment. There is a 100-meter overall length 


limitation of the cable run from the telecommunications closet to the networking de- 
vice in the work area. This includes the length of the patch cables at each end (items 
D and G) plus the cable run (item E). A general rule of thumb is to allow 90 meters 
for the cable run from the telecommunications closet to the work area (item E). This 
allows 5 meters of cable length for the work area and 5 meters for the patch cables in 
the telecommunications closet (item D) and the work area (item G). Figure 2-5 shows 
an example of the insides of a telecommunications closet. 
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FIGURE 2-5 Inside a telecommunications closet. 


2-3 UNSHIELDED TWISTED-PAIR CABLE 


Unshielded twisted-pair (UTP) cable plays an important role in computer network- UTP 
ing. The most common twisted-pair standards used for computer networking today Unshielded twisted-pair 
are category 6 (CAT6), category 6a (CAT6a), and category 5e (CATSe). CAT6 ca- 
ble is tested to provide the transmission of data rates up to 1000 Mbps for a maximum 
length of 100 meters. CAT6a is an improved version of CAT6 and will support 10 gi- 
gabit Ethernet. 

CATS5e cable is an enhanced version of CATS and provides improved perfor- 
mance requirements of the cable. CAT6 provides improved performance and a band- CAT5e 
width of 250 MHz. CAT5/5e twisted-pair cable contains four color-coded pairs of | Enhanced version of CAT5 
24-gauge wires terminated with an RJ-45 (8P8C) connector. Figure 2-6 provides an 
example of a CATSe cable terminated with an RJ-45 (8P8C) modular plug. CAT6 
twisted-pair cable also contains four color-coded wires, but the wire gauge is 
23AWG. CAT®6 cable has a stiffer feel compared to CATSe. 


CAT6/6a 

The current standard in high 
performance twisted-pair 
cable 
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FIGURE 2-6 An example of an RJ-45 modular plug (courtesy of Cyberguys.com). 


The precise manner in which the twist of CAT6/Se/5 cable is maintained, even 
at the terminations, provides a significant increase in signal transmission perfor- 
mance. CAT5/5e standards allow 0.5 inches of untwisted cable pair at the termina- 
tion. CAT6 has an even tighter requirement that allows for only 3/8-inch of untwisted 
cable at the termination. The termination is the point where the cable is connected to 
terminals in a modular plug, jack, or patch panel. 


Balanced Mode CAT6/Se/5 twisted-pair cable contains four twisted wire pairs for a total of 
Neither wire in the wire eight wires. In twisted-pair cable, none of the wires in the wire pairs are connected to 
pairs connects to ground ground. The signals on the wires are set up for a high (+) and low (-) signal line. The 


(+) indicates that the phase relationship of the signal on the wire is positive and the 
(-) indicates that the phase of the signal on the wire is negative; both signals are rel- 
ative to a virtual ground. This is called a balanced mode of operation—the balance 
of the two wire pairs helps maintain the required level of performance in terms of 
crosstalk and noise rejection. 

Table 2-1 lists the different categories of twisted-pair cable defined by the 
EIA/TIA 568B standard. The table includes an application description and minimum 
bandwidth for each category. Notice that there is not a listing for CAT1 and CAT2. 


TABLE 2-1 Different Categories for Twisted-pair Cable, Based on 


TIA568B 

Category Description Bandwidth/Data Rate 

Category 3 (CAT3) Telephone installations Class C Up to 16 Mbps 

Category 5 (CAT5) Computer networks Class D Up to 100 MHz/100 Mbps 
100-m length 

Enhanced CAT5 (CAT5e) Computer networks 100 MHz/1000 Mbps 


applications with 
improved noise 
performance in a full 
duplex mode 
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Category Description Bandwidth/Data Rate 


Category 6 (CAT6) Higher-speed computer Up to 250 MHz networks 
Class E/1000Mbps 

CAT6 supports 10 Gbps 
but at distances less than 
100 meters 

Up to 500 MHz networks 
Class Ea/10 Gbps 

Up to 600 MHz speed 
computer networks Class 


F/10 Gbps 


Category 6a (CAT6a) Increased bandwidth 


Category 7 (CAT7) Proposed standard 


Category 7a (CAT7a) 


CAT 1 and CAT2 cable specifications are not defined in the EIA/TIA 568B stan- 
dard. The first CAT or category specification is for CAT3. CAT3 is being replaced 
with CAT5e or better. CAT4 is not listed in the table because the category was re- 
moved from the TIA568B standard as its data capacity specification was outdated. 
The category 5 cable standard was established in 1991, and many computer networks 
are still using the older CATS cables. Certified CATS cabling works well in both Eth- 
ernet and FastEthernet networking environments that run 10 Mbps Ethernet and 100 
Mbps FastEthernet data rates. Note that the term FastEthernet is used to describe the 
100 Mbps data rate for FastEthernet networks. 

In some cases, users on networks are experiencing network congestion or bot- 
tlenecking of the data due to the increased file transfer sizes and the limited band- 
width of their network. These terms describe excessive data traffic that is slowing 
down computer communications even in FastEthernet networks. Basically, the de- 
mands on the network exceeded the performance capabilities of the CATS cable. The 
slowdown of the data is of major concern in computer networks. File access time is 
delayed, productivity is affected, and the time required to complete a task is in- 
creased. A slowdown in your network could be costing your company money. Can 
you imagine the consequences if a slowdown in your network causes a delay in the 
company’s billing? 

TIA/EIA ratified the CATSe cabling specification in 1999 to address this con- 
tinuing need for greater data handling capacity in the computer networks. The en- 
hanced CATS cable (CATSe) provides an improvement in cable performance, and if 
all components of the cable installation are done according to specification, then 
CATS5e will support full duplex gigabit Ethernet (1000 Mbps Ethernet) using all 
four wire pairs. Full duplex means that the computer system can transmit and receive 
at the same time. TIA/EIA ratified the CAT6 cabling specification in June 2002. This 
cable provides an even better performance specification and 250 MHz of bandwidth, 
and maintains backward compatibility with CATS/S5e. CAT6 can support 10-Gbps 
data rates but over a distance less than 55 meters. The CAT6a standard supports 10- 
gigabit data rates up to 100 meters, and CAT7 will also support 10 Gbps up to 100 
meters with improved bandwidth. The 10-gigabit standard over copper is called 


FastEthernet 
An Ethernet system 
operating at 100 Mbps 


Network Congestion 
A slowdown on network data 
traffic movement 


Bottlenecking 
Another term for network 
congestion 


Full Duplex 

Computer system can 
transmit and receive at the 
same time 


Gigabit Ethernet 
1000 Mbps Ethernet 


CAT7/7a and CAT6a 

UTP cable standards that 
support 10 gigabit date rates 
for a length of 100 meters 


10GBASE-T 
10GBASE-T. 10-gigabit over twisted-pair 
copper 
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STP 
Shielded twisted pair 


EMI 


Electromagnetic interference 


T568A 

Wire color guidelines 
specified under the 
EITA/TIA568B standard 


T568B 

Wire color guidelines 
Specified under the 
ETA/TIA568B standard 


Color Map 

The specification of which 
wire color connects to which 
pin on the connector 
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Shielded Twisted-pair Cable 


In some applications, a wire screen or metal foil shield is placed around the twisted- 
pair cable. Cable with the addition of a shield is called shielded twisted-pair (STP) 
cable. The addition of this shield reduces the potential for electromagnetic interfer- 
ence (EMI) as long as the shield is grounded. EMI originates from devices such as 
motors and power lines, and from some lighting devices such as fluorescent lights. 

The shield on the twisted-pair cable does not reject all potentially interfering 
noise (EMI), but it does greatly reduce noise interference. There is an active debate 
in the networking community as to which product is superior, UTP or STP. It 1s im- 
portant to note that the objective of both cables is to successfully transport data from 
the telecommunications closet to the work area. Industry testing on STP cable has 
shown that the addition of a shield does increase the usable bandwidth of the cable 
by increasing the noise rejection between each of the wire pairs. However, the tests 
have shown that there is not a significant advantage of placing a shield over a prop- 
erly installed 4pair 100-ohm UTP cable. Additionally, STP is more expensive, and the 
increased costs may not justify the benefits. For now, most manufacturers are 
recommending the use of UTP cable for cabling computer networks except for very 
noisy environments. 


2-4 TERMINATING CAT6/5E/5 UTP CABLES 


This section introduces the techniques for terminating high-performance UTP cables. 
Terminating the RJ-45 (8P8C) connector for CAT6/Se/5 cable is defined by the 
EIA/TIA standard EIA/TIA568-B.2 and B.2-1. This portion of the standard defines 
the specifications of the copper cabling hardware. The standard specifies cabling 
components, transmission, system models, and the measurement procedures needed 
for verification of the balanced twisted-pair cabling. 

Within the EIA/TIAS568B standard are the wiring guidelines TS568A and 
TS68B. These wiring guidelines specify the color of wire that connects to what pin 
on the connector. The specification of the wire color that connects to what pin is 
called a color map. Table 2-2 provides the color maps specified by the T568A and 
T568B wiring guidelines. 


TABLE 2-2 The Wiring Color Schemes for T568A and T568B 


Pin # 568A Wire Color 568B Wire Color 
1 White-Green White-Orange 

2 Green Orange 

3 White-Orange White-Green 

4 Blue Blue 

5 White-Blue White-Blue 

6 Orange Green 

7 White-Brown White-Brown 

8 Brown Brown 


Figure 2-7 (a) shows the placement of the wire pairs in the RJ-45 (8P8C) mod- 
ular plug and Figure 2-7 (b) for the T568A and T568B standards. The pin numbers 
for the RJ-45 (8P8C) modular plug are shown at the top of the figure and a wire color 
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table is also provided for reference. In the T568A wire color scheme (Figure 2-7 [a]), 
a white-green wire connects to pin 1, the wire color green connects to pin 2, and the 
wire color connected to pin 3 is white-orange, and so on. Similar information is pro- 
vided in Figure 2-7 (b) for the T568B wiring standard. The color of the wire con- 
nected to pin | is white-orange, pin 2 is orange, pin 3 is white-green, and so on. This 
information also agrees with Table 2-2. 
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FIGURE 2-7 (a) The wiring of the RJ-45 (8P8C) connector and the wire color codes for 
the T568A standard; (b) the wiring of the RJ-45 connector for the T568B standard 
(courtesy of StarTech.com). 


A common question is, “What is the difference between T568A and T568B?” 
Basically, these are just two different manufacturer standards used to wire the mod- 
ular connector hardware. There is not a performance improvement with either, just a 
color order choice. Industry tends to favor the T568A wiring order; however, either 
order can be used as long as the order is maintained throughout the network. 

This material has defined the wire color order for terminating the RJ-45 (8P8C) 
plugs and jacks onto the CAT6/Se twisted-pair cables. Be able to describe the differ- 
ence between the T568A and T568B wire color order and make sure you know what 
wire color configuration you are using in a network, T568A or T568B, and that you 
specify hardware that is compatible with your selected color scheme. 


Computer Communication 


As mentioned in section 2-2, the CAT6/Se cable contains four twisted wire pairs. Fig- 
ure 2-8 provides a picture of the four wire pairs. Figure 2-9 shows the signals and pin 
number assignments for the RJ-45 (8P8C) plug for CATSe. Notice in Figure 2-9 that 
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the Transmit Out signals are marked with a (+) and (-). The Receive In (+) and (-) sig- 
nals are also marked in the same way. The (+) and (-) symbols are typical ways of in- 
dicating the positive and negative sides of a balanced wire pair. Recall from section 
2-3 that in a balanced mode of operation, neither signal line is at ground. 





FIGURE 2-8 The four wire pairs of the CAT6/CAT5e. 


Front View 


RJ-45 Modular Plug 
Pin Assignments 





FIGURE 2-9 The pin assignments and signal names for the RJ-45 (8P8C) modular plug 


(CAT5e). 
TX For computers to communicate in a LAN, the transmit and receive pairs must 
Abbreviation for transmit be properly aligned. This means the transmit (TX) (+) and (-) signals must connect 


to the receive (RX) (+) and (-) as shown in Figure 2-10. Notice in Figure 2-10 that 
pins 1-2 of device A connect to pins 3—6 of device B. Pins 1—2 of device B connect 
to pins 3-6 of device A. This configuration is always valid when the data rates are 10 
or 100 Mbps. 


RX 


Abbreviation for receive 


Device A Device B 


TTS) Ixo 
DTS) IXO? 


3. RX (+) RX (+) 3. 
6. RX (-) RX (-) 6. 





FIGURE 2-10 The proper alignment of the transmit and receive pairs in a CAT6/5e data 
link operating 10 or 100 Mbps. 
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In a LAN, the proper alignment of the transmit and receive pairs is managed by 
a switch or hub, not typically in the cable. Remember, in a star topology, all network 
communication travels through a switch or hub. You will see an “X” on many of the 
switch and hub input ports, indicating that this is a cross-connected input. This means 
that transmit and receive pairs are internally swapped to maintain proper signal align- 
ment of the TX and RX pairs. Even if the “X” is missing, the switch or hub still prop- 
erly aligns the TX and RX wire pairs. There is an exception to this on many switches 
and hubs. Some switches and hubs have an input port that can be selected to be 
“straight” or “crossed.” These ports are typically used in uplink applications when you 
connect a switch or hub to another switch or hub. Just remember, proper alignment of 
the transmit and receive pair must be maintained for the computers to communicate. 
And a final note, if the wires are not properly connected, there won’t be a link light. 

There is a difference with the signal names for the UTP cable when operating 
at 1 Gbps and 10 Gbps. At these higher data rates, the use of all four wire pairs is re- 
quired and the data is bidirectional, which means the same wire pairs are being used 
for both transmitting and receiving data. Figure 2.11 shows the pin assignments and 
signal names. 


1000 Mbps and 
10 Gbps 
Color (T568A) 


1000 Mbps and 1000 Mbps and 10/100 1000 Mbps 
10 Gbps 10 Gbps Mbps Signal 


Color (T568B) Signal 
BI_DA+ TX+ BI_DA+ 
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(a) The pin assignments and signal names for b) The pin assignments and signal names for 
1 Gbps and 10 Gbps (T568A). 1 Gbps and 10 Gbps (T568B). 
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FIGURE 2-11 The pin assignments and signal names for 1 Gbps and 10 Gbps (T568A and 
T568B). 


Straight-through and Crossover Patch Cables 


Category 6/Se twisted-pair cables are used to connect networking components to 
each other in the network. These cables are commonly called patch cables. In this 
section a technique for terminating CAT6/Se cables with RJ-45 (8P8C) modular 
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Straight-through Cable plugs is demonstrated for two different configurations of patch cables, a straight- 


The wire pairs in the cable through and a crossover cable. In a straight-through cable the four wire pairs con- 
connect to the same pin nect to the same pin numbers on each end of the cable. For example, pin 1 on one end 
numbers on each end connects to pin 1 on the other end. Figure 2-12 shows an example of the wire-map 
Wire-map for a straight-through cable. A wire-map is a graphical or text description of the wire 
A graphical or text connections from pin to pin for a cable under test. Notice that in Figure 2-12 the trans- 
description of the wire mit and receive pairs connect to the same connector pin numbers at each end of the 


connections from pin to pin cable, hence the name straight or straight-through cable. 
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FIGURE 2-12 The wire-map for a straight-through cable. 


Crossover Cable In some applications in 10/100 Mbps data links, it is necessary to construct a 
Transmit and receiver wire cable where the transmit and receive wire pairs are reversed in the cable rather than 
pairs are crossed by the switch or the hub. This cable configuration is called a crossover cable, which 


means the transmit pair of device A connects to the receive pair of device B, and the 
transmit pair of B connects to the receive pair of A. Figure 2-13 shows the wire-map 
for a crossover cable. 
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FIGURE 2-13 The wire-map for crossover cable 10/100 Mbps links. 


Note 


The crossover cable diagram shown in Figure 2-13 is for 10/100 Mbps. A gigabit crossover 
cable requires that all four wire-pairs be crossed. Although this is possible, it is not 
practical to make a gigabit crossover cable because of the limit on untwisted wire. 
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Terminating the CAT6 Horizontal Link Cable This section presents the steps 
required for terminating a CAT6 cable using the AMP SL series termination proce- 
dure, the AMP SL tool, CAT6 cable, and the AMP SL Series AMP-TWIST-6S Cate- 
gory 6 modular jacks. In this example, an RJ-45 (8P8C) jack is used to terminate each 
end of the cable. One end connects to a wall plate in the network work area. The other 
end will terminate into a CAT6 RJ-45 (8P8C) patch panel, which is typically located 
in the LAN network closet. 

The technical specifications and assembly requirements are more stringent 
with CAT6. This means that more care must be taken when terminating a CAT6 ca- 
ble. However, advancements in the tools and connectors have actually made it easier 
to terminate CAT®6 than it was with the old punch-down tools. The steps for termi- 
nating the CAT6 horizontal link cables are as follows: 


1. Before terminating the cable, inspect the cable for any damage that might have 
occurred in installation. Examples of damage to look for include nicked or cut 
wires and possible stretching of the cable. 

2. At the work area outlet end, add about one foot extra and cut the wire. Then 
coil the extra cable and insert it in the receptacle box. It is good to leave a lit- 
tle extra in case you make an error in installation and have to redo the termina- 
tion. Remember, you can’t splice a CAT6 cable. At the distribution end, you 
will route the cable and create a slack loop. A slack loop is simply extra cable 
looped at the distribution end that is used if the equipment must be moved. In 
cases where you are having the cable pulled through duct-work or conduit by 
an installer, make sure you specify that extra cable length will be run. This will 
vary for each installation. Remember to allow for 5 meters in the telecommu- 
nications closet and allow for 5 meters in the work area. 

3. Place a bend limiting strain relief boot on the cable, as shown in Figure 2-14 
(a). This is used in the last step to secure the RJ-45 (8P8C) jack. After placing 
the boot on the cable, you will need to strip approximately three inches of ca- 
ble jacket from the UTP cable as shown in Figure 2-14 (b). Be careful not to 
nick or cut the wires. 





FIGURE 2-14 (a)Placing the bend-limiting strain relief boot on the cable and (b) 
stripping off three inches of jacket from the UTP cable. 
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4. Remove the jacket from the UTP cable. Bend the cable at the cut, as shown in 
Figure 2-15 (a) and remove the jacket and expose the four wire pairs as shown 
in Figure 2-15 (b). 








(a) (b) 


FIGURE 2-15 (a) Separating the cut jacket from the wire pairs and (b) removing of the 
jacket and exposing the four wire pairs. 


5. Cut the plastic pull line and the string as shown in Figure 2-16 (a). The plastic 
line adds strength to cable for pulling, and the string is used to remove extra ca- 
ble jacket as needed. Place a lacing fixture on the cable, as shown in Figure 
2-16 (b), and sort the wires in either T568A or T668B color order. 





(a) (b) 


FIGURE 2-16 (a) Removing the plastic pull line and (b) placing the lacing tool on the 
cable with the color sorted cable pairs. 


The sorted wire pairs are matched up with colors provided on the lacing fixture 
for 568A and 568B as shown in Figure 2-17. 


6. Place the wires in the slots of the lacing tool as shown in Figure 2-18. The wire 
colors are matched to the proper order (TS568A/T568B) displayed on the sides 
of the lacing tool. 
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connections. 


The sides of the lacing tool showing the T568A and T568B wire color 





-IGURE 2-18 The routed cable wires on the lacing tool. The wire order shown is T568B. 


7. Align an RJ-45 (8P8C) jack with the lacing fixture as shown in Figure 2-19 (a). 
The RJ-45 jack must be properly aligned with the wires on the lacing fixture to 
maintain proper color order. Figure 2-19 (b) provides a close-up picture of the 
AMP SL series AMP-TWIST-6S modular jack. This picture shows the loca- 
tions of the displacement connectors on the modulator jack. 

8. Insert the RJ-45 (8P8C) modular jack into the AMP SL tool as shown in Fig- 
ure 2-20 (a), and then insert the RJ-45 (8P8C) jack into the AMP SL tool as 
shown in Figure 2-20 (b). Press the wires into the eight displacement connectors 
on the RJ-45 (8P8C) jack using the AMP SL tool as shown in Figure 2-20 (c). 
This technique enables the pair twist to be maintained right up to the point of 
termination. In fact, the untwisted-pair length is less than or equal to one- 
quarter inch. 
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AMP SL Series AMP-TWIST-6S 
Category 6 Modular Jack 





(a) (b) 


FIGURE 2-19 (a) Aligning the RJ-45 (8P8C) jack and the lacing fixture; (b) a close-up 
view of the AMP-TWIST-6S CAT6 modular jack. 











(a) (b) (c) 


FIGURE 2-20 (a) Aligning the RJ-45 (8P8C) jack with the lacing tool; (b) inserting the 
RJ-45 (8P8C) jack and the lacing tool into the AMP SL tool; and (c) using the AMP SL tool 
to crimp the RJ-45 (8P8C) jack onto the eight displacement connectors and to cut the wires. 


9. Connect the bend-limiting strain relief boot to the RJ-45 (8P8C) jack as shown 
in Figure 2-21 (a). Figure 2-21 (b) shows the completed termination. 





(a) Connecting the bend-limiting strain relief boot to the RJ-45 jack. (b) The finished RJ-45 jack termination. 


FIGURE 2-21 Connecting the bend-limiting strain relief boot to the RJ-45 (8P8C) jack. 
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Assembling the Straight-through CAT5e/5 Patch Cable This section pre- 
sents a technique for assembling a straight-through CATSe/5 patch cable. In a 
straight-through patch cable, the wire pairs in the cable connect to the same pin num- 
bers on each end of the CATSe/5 patch cable. Figure 2-22 shows a CATSe patch ca- 
ble with RJ-45 (8P8C) modular plugs. 





FIGURE 2-22 CAT5e patch cable with RJ-45 (8P8C) modular plugs (courtesy of 
StarTech.com). 


The steps for making straight-through patch cables are as follows: 


1. Before terminating the cable, inspect the cable for any damage that might have 
occurred in installation, such as nicked or cut wires and possible stretching of 
the cable. 

2. Measure the cable to length, add about six inches extra, and cut the wire. It is 
good to have a little extra in case you make an error in installation and have to 
redo the termination. You can’t splice CATSe/5 twisted-pair cable! 

3. Strip approximately three-fourths of an inch of the cable jacket from the end of 
the cable using a cable stripper. Figure 2-23 illustrates how to use a cable strip- 
per. Notice that the stripper is positioned about three-fourths of an inch from 
the end of the cable. The cable insulation is removed by rotating the insulation 
stripper around the wire until the wire jacket is loose and easily removable. 
(Note: These tools must be periodically adjusted so that the blade cuts through 
the outer insulation only. If the blades are set too deep, they will nick the wires, 
and the process must be repeated. The damaged portion of the cable must be 
cut away. Nicking the insulation of the twisted-pair wires is not permitted!) 





FIGURE 2-23 An example of using the cable jacket stripper to remove the insulation. 
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4. Sort the wire pairs so that they fit into the connector and orient the wire in the 
proper order for either T568A or T568B as shown in Figures 2-24 (a) and 2-24 (b). 





FIGURE 2-24 (a) Separating wire pairs; (b) orienting the wires. 


5. Clip the wires so that they are even and insert the wires onto the RJ-45 (8P8C) 
modular plug as shown in Figure 2-25. 





FIGURE 2-25 The clipped wires ready for insertion into the RJ-45 (8P8C) plug. 


6. Push the wires into the connector until the ends of each wire can be seen 
through the clear end of the connector. (Note: Now is the time to verify that the 
wire order is correct.) The wires are visible through the plastic connector, as 
shown in Figure 2-26. 





FIGURE 2-26 Wires pushed into the RJ-45 (8P8C) plug. 
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7. Use acrimping tool to crimp the wires onto the RJ-45 (8P8C) plug. The RJ-45 
plug is inserted into the crimping tool until it stops as shown in Figure 2-27 (a). 
Next, squeeze the handle on the crimping tool all the way until it clicks and re- 
leases (see Figure 2-27 [b]). This step crimps the wire onto the insulation dis- 
placement connector pins on the RJ-45 (8P8C) jack. 





FIGURE 2-27 (a) Inserting the connector; (b) crimping the connector. 


8. Repeat these steps for the other end of the twisted-pair cable. 


The next step is to test the cable. These techniques and procedures are discussed 
in section 2-5. 


2-5 CABLE TESTING AND CERTIFICATION 


The need for increased data rates is pushing the technology of twisted-pair cable to 
even greater performance requirements and placing even greater demands on accu- 
rate testing of the cable infrastructure. The data speeds over twisted-pair copper ca- 
ble are now at 10 Gbps. The EIA/TIA 568B standard defines the minimum cable 
specifications for twisted-pair categories operating over bandwidths of 100 MHz and 
at data rates up to 10 Gbps. 

The CAT6/Se designations are simply minimum performance measurements of Full Channel 
the cables, and the attached terminating hardware such as RJ-45 (8P8C) plugs, jacks, Consists of all the link 
and patch panels. The link (the point from one cable termination to another) and the elements from the wall plate 
full channel (which consists of all the link elements from the hub or switch to the tO the hub or switch 
wall plate) must satisfy minimum attenuation loss and near-end crosstalk (NEXT) Attenuation (Insertion 
for a minimum frequency of 100 MHz. Figure 2-28 shows a graphical representation Loss) 
of the link and the full channel. Table 2-3 lists the CATS5e, CAT6, CAT6A, CAT7, and The amount of loss in the 


Link 
Point from one cable 
termination to another 


CAT7A EIA/TIA 568B channel specifications. signal strength as it 
propagates down a wire or 
Full Channel fiber strand 


Near-end Crosstalk 
ee a > (NEXT) 


A measure of the level of 


Switch Patch Panel , f 
f crosstalk or signal coupling 
Link within the cable, with a high 
NEXT (dB) value being 
. . desirable 
FIGURE 2-28 The link and channel areas for cable testing. ' 
Section 2-5 e CABLE TESTING AND CERTIFICATION “an 


— @) 


TABLE 2-3 EIA/TIA 568B CAT5e, CAT6, CAT6A, CAT7 and CAT7A 
Channel Specifications 


Parameter Category 5e Category 6 Category 6A Category 7/7A 
Class Class D Class E Class E, Class F/F; 
Bandwidth 100 MHz 250 Mhz 500 MHz 600 MHz/ 
1000 MHz 
Insertion Loss (dB) 24.0 21.3 20.9 20.8/20.3 
NEXT Loss (dB) 30.1 39.9 39.9 62.9/65.0 
PSNEXT Loss (dB) 27.1 37.1 37.1 59.9/62.0 
ACR (dB) 6.1 18.6 18.6 42.1/46.1 
PSACR (dB) 3.1 15.8 15.8 39.1/41.7 
ACRF1 (ELFEXT) (dB) 17.4 23.3 23.3 44.4/47.4 
PSACRF2 14.4 20.3 20.3 41.1/44.4 
(PSELFEXT) (dB) 
Return Loss (dB) 10.0 12.0 12.0 12.0/12.0 
* PANEXT Loss (dB) n/s n/s 60.0 n/s / 67.0 
* PSAACRF (dB) n/s n/s 37.0 n/s / 52.0 
* TCL (dB) n/s n/s 20.3 20.3/20.3 
*ELTCTL (dB) n/s n/s 0.5 0/0 
Propagation Delat (ns) 548 548 548 548/548 
Delay Skew (ns) 50 50 50 30/30 


*These parameters are discussed in section 2-7, “10 Gigabit Ethernet over Copper.” 


The list that follows describes some of the parameters listed in Table 2-3: 


e Attenuation (Insertion Loss): This parameter defines the amount of loss in 
signal strength as it propagates down the wire. This is caused by the resistance 
of the twisted-pair cable, the connectors, and leakage of the electrical signal 
through the cable insulation. Attenuation also will increase with an increase in 
frequencies due to the inductance and capacitance of the cable. The cable test 
results will report a margin. Margin for attenuation (insertion loss) is defined 
as the difference between the measured value and the limit for the test. If the 
margin shows a negative value, the test has failed. A negative value 1s produced 
when the measured value is less than the limit. The limit for attenuation (inser- 
tion loss) for CAT6 is 21.3dB, CAT6A is 20.9, CAT7 is 20.8, and CAT7a is 
20.3. It is also important to note that UTP cables have a limit on how much the 
cable can be bent (bend radius). The limit on the bend radius is four times the 
outer jacket diameter. The reason for this is bends exceeding the limit can in- 
troduce attenuation loss. 

Crosstalk e NEXT: When current travels in a wire, an electromagnetic field is created. This 

Signal coupling in a cable field can induce a voltage in adjacent wires resulting in crosstalk. Crosstalk is 
what you occasionally hear on the telephone when you can faintly hear another 
conversation. Near-end crosstalk, or NEXT, is a measure of the level of 
crosstalk, or signal coupling within the cable. The measurement is called near- 
end testing because the receiver is more likely to pick up the crosstalk from the 
transmit to the receiver wire pairs at the ends. The transmit signal levels at each 
end are strong, and the cable is more susceptible to crosstalk at this point. 
Additionally, the receive signal levels have been attenuated due to normal ca- 
ble path loss and are significantly weaker than the transmit signal. A high 
NEXT (dB) value is desirable. 
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Figure 2-29 graphically depicts NEXT. The dark gray area shows where the 
near-end crosstalk occurs. The margin is the difference between the measured 
value and the limit. A negative number means the measured value is less than 
the limit, and therefore the measurement fails. Crosstalk is more problematic at 
higher data rates (for example, 1 Gbps, 10 Gbps). Figure 2-30 shows how CAT6 
cable has a built-in separator to help minimize crosstalk among wire pairs. This 
separator is used to keep each wire pair at a minimum distance from other wire 
pairs. This addition reduces crosstalk at higher frequencies and helps provide 
improved signal bandwidth, and therefore it will support faster data rates. This 
addition also helps improve the far-end cross-talk. Note that not all cable man- 
ufacturers use the separator. 


Near-end crosstalk 


a 





FIGURE 2-29 A graphical depiction of near-end crosstalk. 
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FIGURE 2-30 The cross section of a CAT6 cable showing the separator used to minimize 
crosstalk problems. 


e Power Sum NEXT (PSNEXT): The enhanced twisted-pair cable must meet Power Sum NEXT 
four-pair NEXT requirements, called PSNEXT testing. Basically, power sum (PSNEXT) 
testing measures the total crosstalk of all cable pairs. This test ensures that the 
cable can carry data traffic on all four pairs at the same time with minimal in- 
terference. A higher PSNEXT value is desirable because it indicates better ca- 
ble performance. 
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Equal Level FEXT (ELFEXT): This measurement differs from NEXT in that 
the measurement is for the far end of the cable. Additionally, the ELFEXT mea- 
surement does not depend on the length of the cable. This is because ELFEXT 
is obtained by subtracting the attenuation value from the far-end crosstalk 
(FEXT) loss. Higher ELFEXT values (dB) indicate the signals at the far end of 
the cable are larger than the cross-talk measured at the far end. A larger 
ELFEXT (dB) value is desirable. A poor ELFEXT can result in data loss. 
PSELFEXT: Power sum ELFEXT that uses all four wire pairs to obtain a com- 
bined ELFEXT performance measurement. This value is the difference the test 
signal level and the cross-talk measured at the far end of the cable. A higher 
PSELFEXT value indicates better cable performance. 

ACR: This measurement compares the signal level from a transmitter at the far 
end to the crosstalk measured at the near end. A larger ACR indicates that the 
cable has a greater data capacity and also indicates the cable’s ability to handle 
a greater bandwidth. Essentially, it is a combined measurement of the quality 
of the cable. A higher ACR value (dB) is desirable. 

PSACR: Power sum ACR uses all four wire pairs to obtain the measure of the 
attenuation—crosstalk ratio. This is a measurement of the difference between 
PSNEXT and attenuation (insertion loss). The difference is measured in dB, 
and higher PSACR dB values indicate better cable performance. 

Return Loss: An equally important twisted-pair cable measurement is return 
loss. This measurement provides a measure of the ratio of power transmitted 
into a cable to the amount of power returned or reflected. The signal reflection 
is due to impedance changes in the cable link and the impedance changes con- 
tributing to cable loss. Cables are not perfect, so there will always be some re- 
flection. Examples of the causes for impedance changes are non-uniformity in 
impedance throughout the cable, the diameter of the copper, cable handling, 
and dielectric differences. A low return loss value (dB) is desirable. 
Propagation Delay: This is a measure of the amount of time it takes for a sig- 
nal to propagate from one end of the cable to the other. The delay of the signal 
is affected by the nominal velocity of propagation (NVP) of the cable. NVP 
is some percentage of the velocity of light and is dependent on the type of ca- 
ble being tested. The typical delay value for CATS/Se UTP cable is about 5.7 
nsec per meter. The EIA/TIA specification allows for 548 nsec for the maxi- 
mum 100-meter run for CATSe, CAT6, CAT6a, CAT7, and CAT7A 

Delay Skew: This is a measure of the difference in arrival time between the 
fastest and the slowest signal in a UTP wire pair. It is critical in high-speed data 
transmission that the data on the wire pair arrive at the other end at the same 
time. If the wire lengths of different wire pairs are significantly different, then 
the data on one wire will take longer to propagate along the wire, hence arriv- 
ing at the receiver at a different time and potentially creating distortion of the 
data and data packet loss. The wire pair with the shortest length will typically 
have the least delay skew. 
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Note 


The power sum measurements are critical for high-speed data communication over UTP. It 
has also been shown that twisted-pair cable can handle gigabit data rates over a distance 
up to 100 meters. However, the gigabit data rate capability of twisted-pair requires the use 
of all four wire pairs in the cable, with each pair handling 250 Mbps of data. The total bit 
rate is 4 x 250 Mbps, or 1 Gbps, hence the need to obtain the combined performance 
measurements of all four wire pairs. 


Testing the CAT6 Link 


Tests on a CAT6 link were conducted using a Fluke Networks DTX-1800 CableAn- 
alyzer. The tests required the use of an injector unit (main/master) and a remote as 
shown in Figure 2-31. The test set conducts all required EIA/TIA568B tests to meet 
CAT®6 certification for both channel and link tests. The following discussion describes 
the tests conducted for certifying a CAT6 UTP terminated cable link. Testing a link 
means that the test was conducted on the cable from one cable termination to the other 
terminated end. The tests were conducted using a DT'X-1800 CableAnalyzer (mas- 
ter) and a DTX-1800 smart remote (slave). The test results are displayed using the 
Fluke Networks LinkWare software. 





FIGURE 2-31 The test setup for the CAT6 cable tests. 


The first menu, shown in Figure 2-32, shows the summary test information for 
the cable test. This summary list is for the Cable ID-Chamisa 2092 test. The summary 
list is shown to underscore the importance of documenting the tests and the certifi- 
cation process. The test results provide a record of the cable performance on that day. 
The name is Chamisa 2092, which is the building (Chamisa) and cable number 
(2092), and these are used to keep track of the location and cable being tested. The 
menu also includes the type of test, TIA Cat6 Perm Link, and it also lists the model 
and serial numbers for the DTX-1800 cable testers. When conducting Permanent 
Link testing, the master unit should be at the distribution end (Telecommunications 
Closet), and the slave should be connected to the outlet in the work area. All this in- 
formation is useful if problems occur with the cabling and also serves as a way to cer- 
tify your cable installation before switching your network over to a new cable plant. 
Notice the result entered for the test result: Pass. This quickly tells us that the cable 
passed all CAT6 performance specifications. 

The next menu, shown in Figure 2-33, lists the wire-map results for the test. 
This menu shows that this is a straight-through cable, as depicted by the picture of 
the wire-map. The wire-map menu shows that this cable is wired T568B. 
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FIGURE 2-32 The summary menu for the UTP cable test. 
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FIGURE 2-33 The wire-map test results. 


Pair Data Figure 2-34 shows the menu for the pair data, which are the tests on the four 
Data collected on the UTP wire pairs in the UTP cable. This menu is showing the test data for the following wire 
pairs; 1-2, 3-6, 4-5, and 7-8. The menu first shows that cable passed length, propa- 
gation delay, and delay skew. The test results show that wire pair 7/8 has a delay skew 
test result of 18 ns. Recall that delay skew is a measure of the difference in arrival 
times between the fastest and slowest signal in a UTP wire pair. The maximum delay 
skew allowed for the test is 45 ns. The maximum delay skew allowed under EIA/TIA 
568B is 50 ns; however, the Permanent Link test has a maximum delay skew limit of 
44 ns. Also note that the maximum length for the test is set to be 295 feet, which is 
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less than the 100-meter (328-feet) limit. Once again, the Permanent Link test is al- 
lowing for extra cable in the telecommunication room and the work area. The pair 
data menu also displays the length and delay of each wire pair. The wire pair lengths 
for the cable are as follows: 


1-2: 158 ft. 
3—6: 166 ft. 
4-5: 168 ft. 
7-8: 156 ft. 
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FIGURE 2-34 The pair data test results. 


Notice the difference in the wire pair lengths. This is due to the different twists used 
in the UTP cable. This also underscores the importance of properly grouping wire 
pairs when terminating a UTP cable. A mismatched pair will result in wires of dif- 
ferent lengths. For long cables, this is of major concern. The maximum length of the 
cable in a Permanent Link test is 308 ft. (~93.8 m.). Remember, this is a CAT6 link 
test, and some length must be left at the ends for connecting to the computer and the 
equipment in the telecommunications room. The full channel test would have a max- 
imum of 100 meters (~328 ft.). The expected delays for the wire pairs are also pro- 
vided. As expected, the delays differ for each wire pair. 

The next test menu, shown in Figure 2-35, is for insertion loss. This test 1s con- 
ducted for each wire pair. The test reports the maximum insertion loss and the fre- 
quency at which the measurement is made. The tester frequency sweeps the cable and 
records the measurements as the cable is tested. For pair 3—6, the worst-case insertion 
loss (attenuation) is 15.0 dB at 250 MHz. Overall margins for the insertion loss mea- 
surements are displayed in the center of the Insertion Loss menu. The margin (16.1 
dB) is the difference between the limit (31.1 dB) and the measured value (15.0 dB). 
This is showing that the test exceeds the minimum performance specification. 
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FIGURE 2-35 The insertion loss test results. 


The next menu, shown in Figure 2-36, is for the NEXT (near-end crosstalk) 
measurements. Tests are conducted on all combinations of wire pairs (1—2/3-6, 
1—2/4—5, 1—2/7-8, 3-6/4—-5, 3—6/7—8, and 4—-5/7—-8). Measurements are taken from 
the master (main) and the remote unit. The test data includes the dB NEXT value, the 
margin, and the frequency for the master (main) and the remote. For example, at the 
master (main), pair 1—2/3—6 has a 48.5 dB NEXT, a margin of 7.8, and the worst-case 
measurement was made at a frequency of 117.5 MHz. At the remote, pair 1—2/3-6 
has a 42.6 dB NEXT, a margin of 6.9, and the worst-case measurement was made at 
a frequency of 237 MHz. 
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FIGURE 2-36 The NEXT test results. 
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Figure 3-37 shows the Power Sum NEXT test results. Recall that power sum 
measurements provide a measure of the total crosstalk of all cable pairs, ensuring that 
the cable can simultaneously carry data traffic on all four wire pairs with minimal in- 
terference. The measurements are made from both ends of the cable link. 
EIA/TIA568B allows a PSNEXT measurement of 30.2 dB. The data shows that the 
worst-case test results of 46.6 dB are well within specifications. 
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FIGURE 2-37 The power sum NEXT test results. 


Figure 2-38 provides the ACR test results. The tests show that the worst case is 
at the remote for pair 3—6/4—5 with a measurement of 69.3 dB at 5.9 MHz. The test 
limit is 57.2 dB, and there is a 12.1 dB margin. Figure 2-39 provides the power-sum 
ACR measurements. Pair 3—6 at the main measures 59dB with a margin of 14 dB. 
Pair 3—6 at the remote measures 68.4 dB with a margin of 13.5 dB. 
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FIGURE 2-38 The attenuation-crosstalk (ACR) test results. 
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FIGURE 2-39 The power-sum attenuation-crosstalk (PSACR) test results. 


The next menu, shown in Figure 2-40, shows the test results for the equal level 
far-end crosstalk (ELFEXT). Recall that ELFEXT is a calculated value based on at- 
tenuation and far-end crosstalk measurements. Test results obtained by the master 
(main) and the remote are displayed for all wire pair combinations of the cable link. 
The next menu is for the power sum measurements. The results are provided in Fig- 
ure 2-41. Both the ELFEXT and PSELFEXT tests indicate that each passed. 
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FIGURE 2-40 The ELFEXT test results. 
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FIGURE 2-41 The power-sum ELFEXT test results. 


The last menu, shown in Figure 2-42, is for return loss. The test reports the 
maximum attenuation and the frequency at which the measurement is made. The re- 
turn loss is measured from both the main and remote units. The return-loss measure- 
ments are displayed in dB and are made for different frequencies as the cable analyzer 
frequency sweeps the cable. The worst return-loss measurement (greatest dB value) 
is highlighted. The return loss for wire pair 4—5 is 14.7 dB at 241.5 MHz from the 
main and 16.2 dB at 235 MHz from the remote. The overall limits and margins for 
the return-loss measurements are also displayed. 
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FIGURE 2-42 The return loss test results. 
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Recall that the first menu (summary) showed that the cable passed all tests. 
Stepping through the individual tests confirms this. The Fluke DTX-1800 Cable An- 
alyzer also generates a comprehensive certification report, as shown in Figure 2-43. 
This one-page report lists all the test results described in Figures 2-32 to 2-42. The 
checkmark at the top right of the report provides a quick indicator that the cable link 
passed or failed a test. In this example, the cable passed the test. Figure 2-44 shows 
the PASS and FAIL symbols for the certification report. The comprehensive certifi- 
cation report is most likely the document you will want to keep in a file as a record 
of cable performance. All the test data needed for certifying a CAT6 link are listed on 
the one-page report. Examples of failed tests are provided in section 2-7. 
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FIGURE 2-43 The one-page certification report for the Chamissa-2092 CAT6 cable test. 
Notice that there is a PASS symbol in the upper-right corner that indicates the cable passed 
all CAT6 certification tests. 
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FIGURE 2-44 The PASS and FAIL symbols used on a Fluke DTX certification reports. 
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2-6 10 GIGABIT ETHERNET OVER COPPER 


Ethernet over copper is available for 10 Mbps (Ethernet), 100 Mbps (FastEthernet), 
1000 Mbps (gigabit Ethernet), and now 10 Gbps (ten gigabit Ethernet). (Note that 
Mbps is “megabits per second.” Some literature writes this as Mb/s). The increase in 
the required bandwidth for transporting a ten gigabit data transfer rate is placing in- 
creased demands on the copper cable as well as the hardware used for terminating the 
cable ends and for connecting to the networking equipment. There are three im- 
provements required for transmitting the higher data bit rates over the copper cabling: 


1. Improve the cable so it can carry greater bandwidth. 

2. Improve the electronics used to transmit and receive (recover) the data. 

3. Utilize improvements in both the cable and electronics to facilitate greater 
bandwidths and distance. 


This section examines the changes in technology that are required to enable the trans- 10GBASE-T 

portation of ten-gigabit data (1OGBASE-T) over copper. The first part presents an 10 Gbps over twisted-pair 
overview of ten-gigabit Ethernet over copper. The second part examines the modifi- copper cable 

cations that were required to the technical specs (CAT6A and CAT7/7A) that are nec- 

essary for testing and certifying twisted-pair copper cable that is transporting 

ten-gigabit data rates. The last section examines the issues of how the ten-gigabit data 

is actually transmitted. 


Overview 


The standard for 10 Gbps is IEEE 802.3an-2006 10GBASE-T. This standard was IEEE 802.3an-2006 
developed to support running 10 Gbps data over twisted-pair cabling. The newer stan- 10GBASE-T 

dard requires the bandwidth to be increased from 250 MHz to 500 MHz. Addition- The standard for 10 Gbps 
ally, the new standard supports 10G Ethernet up to 100 meters in cable length. At one 

time, most people assumed that higher data rates would be limited to fiber optics. 

While this is still true for lengthy runs (more than 100 meters) twisted-pair copper is 

finding its place in the horizontal runs from the telecommunications closet to the 

work area. 


Alien Crosstalk (AXT) 


Alien Crosstalk is an important issue at higher data rates such as with LOGBASE-T. Alien Crosstalk (AXT) 
Alien Crosstalk (A XT) is unwanted signal coupling from one permanent link to an- Unwanted signal coupling 
other. Basically, this is the coupling of a signal from one 4-pair cable to another from one permanent link to 
4-pair cable. An example is shown in Figure 2-45. This figure depicts the Alien another 

Crosstalk (AXT) from one 4-pair cable to another 4-pair cable. The other key mea- PSANEXT 

surements for 1OGBASE-T are NEXT (PSANEXT), FEXT (PSAACRF), and Re- Power Sum Alien Near-End 
turn Loss. PSANEXT (Power Sum Alien Near-End Crosstalk) and PSAACRF —ě Cross-Talk 

(Power Sum Alien Attenuation to Crosstalk Ratio) are new measurements for NEXT 

and FEXT that incorporate measures for Alien Crosstalk. Alien Crosstalk is consid- | PSAACRF 

ered to be the main electrical limiting parameter for 10G Ethernet. Alien Crosstalk Power Sum Alien Attenuation 
causes disturbances in the neighboring cable. It is difficult for the electronics to can- t° Crosstalk Ratio 

cel the AXT noise created; therefore, new cables have been developed to support the 

10 Gbps data rates. The newer cables have improved the cable separation, and new 

connectors have also been developed to help meet the required specifications to sup- 

port 10G. An example of the change in the cable construction was shown in the CAT6 

cross-section, Figure 2-30. 
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FIGURE 2-45 Alien Crosstalk from a neighboring 4-pair cable. 


Cable manufacturers are starting to offer CAT6 and higher grades of twisted- 
pair cable with foil over each of the four wire-pairs. The designation for this type of 
cable is foil twisted-pair (F/UTP). There are several advantages to using a shielded 
cable. The first is that a shielded cable offers better security because there is less 
chance that the data will radiate outside the cable. Additionally, the foil shield helps 
improve noise immunity from Electro-Magnetic Interference (EMI), Radio Fre- 
quency Interference (RFI), and most importantly, AXT. 

Transmission of data over twisted-pair cabling relies on the signals being “bal- 
anced” over the wire pairs. The balance or symmetry of the signal over the wire pairs 
helps minimize unwanted leakage of the signal. There are two parameters now de- 
fined for CAT6 and better cabling that address the issue of balanced data. The first is 
TCL (Transverse Conversion Loss), and the other is ELTCTL (Equal Level 
Transverse Conversion Loss). The TCL measurement is obtained by applying a 
common-mode signal to the input and measuring the differential signal level on the 
output. TCL is sometimes called LCL (Longitudinal Conversion Loss). The 
ELTCLT value (expressed in dB) is the difference between the TCTL and the differ- 
ential mode insertion loss of the pair being measured. TCTL 1s the loss from a bal- 
anced signal at the near-end to the unbalanced signal at the far end. 

The newer tests also require additional Power-Sum tests. These are PPANEXT 
(Power-Sum Alien Near-End Cross-Talk) and PSAACRF (Power-Sum Alien At- 
tenuation Cross-talk Ratio Far-end). These tests have been developed to help en- 
sure cable compatibility with data transmission and reception that requires the use of 
all four wire-pairs. Both gigabit and ten gigabit require the use of all four wire pairs. 
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Signal Transmission 


The LOGBASE-T system requires the use of all four wire pairs as shown in Figure Multilevel Encoding 
2-46. This system splits the 10 Gbps of data into four 2.5-Gbps data channels. This Technique used to reduce in 
same technique is also used for 1000 Mbps (1-gigabit) data rates, except the 1000 the required bandwidth 
Mbps signal is split into four 250 Mbps data channels. The system requires the use of required to transport the 
signal conditioners and Digital Signal Processing (DSP) circuits for both transmis- data 

sion and reception. The data transmission for ten gigabit uses a multilevel encoding 

technique as shown in Figure 2-47. The advantage of this type of encoding is the re- 

duction in the required bandwidth required to transport the data. 


Switch Host NIC 





FIGURE 2-46 The four wire-pairs in UTP cabling required for transporting 10GBASE-T 
data. This same technique is used for 1000 Mbps except the data rate for each of the four 
channels is 250 Mbps. 
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FIGURE 2-47 An example of multilevel encoding of the data streams to reduce the 
required bandwidth. 


10GBASE-T data transmission also requires the use of Digital Signal Process- Hybrid Echo 
ing (DSP) Compensation Techniques. The DSP circuitry provides many functions, Cancellation Circuit 
such as signal conditioning and echo cancellation. Anytime a signal is transmitted Removes the transmitted 
down a cable, part of the signal will be reflected. This reflection adds to overall sig- signal from the receive 
nal degradation and limits the performance of the system. In 10GBASE-T, the trans-  519"al 
mit and receive signals are sharing the same wire pair. This is called full duplex 
transmission and requires the use of a device called a hybrid echo cancellation cir- 
cuit. The hybrid circuit removes the transmitted signal from the receive signal. 
The final issue with 1|OGBASE-T signal transmission is the performance of the 
cable. As mentioned previously, return loss, insertion loss, and crosstalk are all key 
limiting issues for IOGBASE-T. Crosstalk is the most important factor. The types of 
crosstalk observed are AXT (Alien Crosstalk), NEXT (near-end crosstalk), FEXT 
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(far-end cosstalk), and ELFEXT (equal level far-end crosstalk). The cabling systems 
that will support |OGBASE-T operation with links up to 100 meters are CAT6 with 
the foil screen (FTP), augmented CAT6 (CAT6a), CAT7, and CAT7a. 


2-7 TROUBLESHOOTING COMPUTER NETWORKS 


This section examines some of the issues that the network administrator can have with 
both CAT6 and CATS5e cables tests. It is important that the network administrator 
monitor all parts of the cable installation, from pulling to terminating the cable ends. 
The reasons why a cable fails a certification test can be due to multiple types of prob- 
lems, such as with installation, cable stretching, and the cable failing to meet manu- 
facturer specifications. These types of problems are discussed next, followed by a 
look at the certification reports for failures of both CAT6 and CATSe. 


Installation 


If you obtain bad PowerSum measurements or NEXT or FEXT, there might be a prob- 
lem with the installation. The certification report provided in Figure 2-48 indicates 
this cable does not pass CAT6 certification, as shown by the X in the upper-right cor- 
ner of the certification report. This test indicates a “NEXT” failure, which is most 
likely due to a problem at the terminations. The most common error is the installer 
has allowed too much untwisted cable at the termination point. Remember, the twist 
on UTP cable must be maintained to less than 3/8-inch. At this point, the best thing 
is to go and inspect the terminations to see if any terminations have too much un- 
twisted cable and verify whether there is a procedure problem with the installation. 
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FIGURE 2-48 The DTX-1800 certification report: Failure due to termination problem. 
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Cable Stretching 


It is important to avoid stretching of the UTP cable. Stretching of the cable is bad be- 
cause it changes the electrical characteristics of the cable, increasing the attenuation 
and crosstalk. The maximum pulling tension is specified by the manufacturer data 
sheets, and the datasheet will list the maximum pulling tension put on a cable. The 
units for the pulling tension are expressed in lb-ft. 


Cable Failing to Meet Manufacturer Specifications 


Occasionally, manufacturers do experience problems with the cable failing to meet 
specifications. This could be due to a bad production run, and the result is that the ca- 
ble does not meet minimum specifications. Repeated test failures with no apparent 
reason for the failure could indicate that the problem is with the cable. This rarely 
happens, but there is a possibility that there was a bad cable production run. As the 
manager you want to isolate the source of the problem. 

Figure 2-49 provides another CAT®6 certification report, which indicates that 
the cable failed due to excessive insertion loss. Examination of the certification re- 
port shows that the cable length for pairs 7-8 is 311 ft. The maximum cable length 
for a permanent link is 295 ft. This cable run is too long for it to be certifiable. 














5 CABLE TEST MANAGEMENT SOFTWARE 
Cable ID: CHAMISA 2065 Test Summary: FAIL 
Date / Time: ONS1/2007 103557am Operator: L.O. Model; DTX-1800 
Headroom: 4.4 dB (NEXT 12-36) 

Test Limit: TIA Cot 6 Perm. Link 
Cable Type Cat 6 UTP 
Wire Map (T5588) 
Pass 
ort ee eee errr | To 
Sccweccccceecees | LONON (M, Link 295 
?-—_——_—— Prop Delay (ns), Lima 496 [Par 45) 494 
4 4 Belay Skew (ns), Umit 44 [Pair 45) 36 4 
Smet eee eee mens Resistance (ohms) [Par 36] 147 3 
s; e 
5 5 insertion Loss Margin (48) [Par 36) -0.1"F 12” 
Frequency (MHz) [Pair 38) 44 o” , , 
Lint (dB) [Pair 38) 32 o Frequency (MMX) 250 
Wors! Case Margin Worst Case Value 
PASS MAN SR MAN SR wo = S ET a 
Worst Pair 123 1233 378 12% “Megat. aa 
NEXT (68) 6.1 44 89 44 tid ah A 
Freq. (MHz) 99.0 2395 2440 2395 as RN | wo 
„Limit (dB) 49 356 35 36 4“ >- x 
Woest Pair 3 35 35 36 2 2 
PSNEXT (dB) 42 62 $4 62 o o 
Freq. (MHz) s0 2395 2220 2335 0 Frequency (MHz) 250 ° Frequency (MHZ) 29 
Lirit (JB) 34 30 33.6 33,0 
PASS MAIN SR MAIN SR 10, ELFEXT io ELFELT @ Merwe 
Worst Pair 45-36 4535 1278 127 wk wka. 
ELFEXT (d8) 108 105 177 n4 NAI a | 
Freq, (MHz) 85 935 2490 2495 o Nes Aad | | OP) Se A 
a Nae Nee A re et ok 
Limit (4B) 256 248 63 16.2 “0 —— +» e Ta 
Worst Pair 38 Ez] 12 12 0 x . = 
PSELFEXT (d8) 127 130 198 190 d ô 
Freg. (MHZ) 55.5 935 247.0 249.0 ê Froqwarcy (Miz 20 è Foaquancy (Mitr) Pre] 
Limit (dB) 226 218 13.3 13.3 
a O ACR b=) ACR @ Re 
NA WN SA WAN SR o 10 — 
Worst Pair 12-36 123 MS 2% a0 ed 
ACR (cB) 66 $8 114 62 Wy j AT 
Freq, (MHz) 99.0 2305 2445 2455 - rae OL 
„mit (dB) 23.4 53 48 a7 “ TAR Rey NA “ SEVAN 
Worst Pair 3 35 35 36 2 WA 2 " 
PSACR (dB) a? 76 123 a4 v o 
Frog. (MHz) 90 205 2440 2455 0 Frequency (MMz) 20 o Frequency MHE) 20 
Umit (dB) 20.9 27 22 2.1 
R AL Q Remote 
_PASS MAN SR_ | MAIN sR | S : we 
Woest Pair 45 12 45 45 2 lj 4 | 
RL (d8) 43 51 43 54 | AMN Hy 
Freq, (MHz) 244.0 35 2440 2455 = Me drt Sn | ad oe, 
Limit (4B) 10.1 21.0 10.1 10.1 + ees | |W 
12 12 
0 0 
0 Frequency (MHz) 20 0 Frequency (Mrz) 25 
Pr CHAMISA 2000 A ma 
oject 
Site CHAMISA A2000 FLUKE 
chamas fw s... 





FIGURE 2-49 The DTX-1800 certification report: Failure due to excessive insertion loss. 
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CAT5e Cable Test Examples 


The next section presents some test results for several CATSe cable tests. There are 
still many CATSe horizontal cable runs already in place, and these runs support 100- 
Mbps data rates. Therefore, it is important for the network administrator to have a 
good understanding of certifying CATSe links. The objective of this section is to ac- 
quaint the reader with possible CATSe test results and problems they might encounter 
on the job. The procedures presented are the same for CAT6 except that the test mode 
of the cable analyzer must be set to CATSe performance specifications. The testers 
used for conducting the CATSe certification reports are the Fluke OMNIscanner and 
OMNIremote. 


Test 1 The first example presented is the test on a short patch cable. This shows 
that short patch cables can and should be tested. UTP cable testing is not restricted to 
long cables. The length of the wire pairs is about 3 feet. You also have a record that 
this cable meets CATSe requirements. The test was conducted using the 
OMNIscanner. The OMNIscanner certification report verifies that the cable passes 
the CATSe link test. Figure 2-50 shows the certification report, which indicates that 
the cable passed the test. This report shows that the cable length is 3 feet. 


Test 2 This shows the test on the same 3-foot cable used in Test 1; however, the ca- 
ble no longer meets CATSe requirements, as shown in Figure 2-51. The test results indi- 
cate FAIL. In fact, careful inspection of the cable showed that it had been cut or nicked. 
This underscores the importance of documenting the network installation and having a 
record that the cable link was certified. Test 1 showed that the cable met specifications, 
but damage to the cable no longer enables it to meet CATSe link specifications. 

Inspection of the wire-map test results (see Figure 2-51) shows the cable failed, 
highlighted by the FAIL symbol in the upper-right corner of the certification report. 
In this test, the cable has failed a wire-map test. Not only is the text highlighted, but 
there is an exclamation preceding the text that indicates a failure. A quick check of 
the wire-map test shows that the number 4 wire was not detected at the remote. 


Test 3 This cable test (Figure 2-52) also generated a test result of FAIL. Examina- 
tion of the attenuation and return-loss menu shows that the cable failed to meet 
CAT5e attenuation and return-loss specifications. The permitted attenuation in 
CATSe cable is 24 dB. However, the 1—2 and 3-6 pairs have attenuation losses of 38.0 
dB and 41.1 dB. Both cases greatly exceed the permitted maximum. An arrow points 
to these attenuation loss scores. 

This cable also fails return loss for pairs 1—2 and 3—6. CATSe cable permits 10 
dB of return-loss. The tests show that the pairs fail the return-loss test at both the OM- 
NIscanner and the remote test unit. This cable will fail a CATSe certification based 
solely on attenuation or return loss. In fact, this cable also fails NEXT, ELFEXT, and 
PSELFEXT tests. Any of these failures are sufficient to not certify this cable. 
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Circuit ID: Pre-cut OMNIScanner OMNIRemote 
Project: TIA Project S50D99L00377 SW: 06.00 50E99L00037 
Owner: OMNISCANNER 2 Adapter Adapter 
rare amine CHAN SISE/6 CHAN 5/5E/6 
Cable: Cat SE UTP H f | 
NVP: 72 can | 
Site: Las Cruces i 
, Limit 12 36 45 
A x e RTA Length ft (308) 3 3 3 
Sines A Delay (ns): (518) 4 4 4 
Resistance (Ohms): (—) — — = — 
OMNI: 12345678 12345678 Skew (ns): (45) ü 
Remote: 12345678 12345678 Bandwidth (MHz): an 
Attenuation Overall Margin (dB) 199| Retum Loss Overall Margin (dB) — 
OMNiScanner OMNIRemote 
Pairs dB Margin MHz | Pairs dB Margin MHz dB Margin MHz 
2 #03 310 974 2 28 H4 %7 | B4 n2 880 
3 å 04 21 7 3 232 i04 s 25 100 #689 
4 04 FO 974 45 231 101 747 242 110 707 
78 03 199 ë B4 78 B9 15 3 241 120 99.0 
NEXT Overall Margin (dB) 30| ACR Overall Margin (dB)"  — 
Pairs dB Margin MHz dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
wee 625 187 1968 | 7 140 113 “se å = a o l a a lS 
1245 592 215 486 466 143 999 12745 = Bee a nas ies oe 
1278 931 3i 12 524 20 992 we — pts = EN zx a 
36445 505 86 259 45.9 30 226 645 — = ens — — 
3678 560 133 232 53.5 90 181 378e — — =.= ==: _ — 
4678 S516 146 51.6 473 149 990 ore — eh e ae ae ses 
ELFEXT Overall Margin (dB) 153| PSNEXT — Overall Margin (dB) 49 
Pairs dB Margin MHz dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
236 600 220 127 | 61i 221 127 2 67 204 104 448 155 999 
12446 55.3 16.9 12.0 74.6 16.9 14 35 4i 10.3 25,9 447 49 296 
1278 6s 306 109 83 304 19 | 45 498 110 259 46.1 60 219 
36445 461 200 495 768 204 16 | PSELFEXT Overall Margin (¢B)" 15.5 
378 G42 28.2 16.0 469 266 97.4 OMNIScanner OMNIRemote 
4512 746 168 14 7323 «169 1.6 Pairs dB Margin MHz dB Margin MHz 
4536 767 203 1.6 49 200 514 12 736 188 is | 542 187 120 
4578 719 155 1.6 730 153 1.4 38 759 H2 14 | #758 24 1.4 
45 689 155 1.6 690 156 18 
7812 853 34 19 69 306 109 Ae 
7836 438 B6 74 642 22 160 aoe ee EE OT lee Oe OU 
7Te46 730 153 1.4 37 i565 124 PSACR Overall Margin (dB)  —- 
OMNiScanner OMNiRemote 
Pairs dB Margin MHz dB Margin MHz 
12 
| 36 
1 Overall margin value is the worst margin for OMNI and Remote. 45 
| 78 
f MICROTEST?® eee Date: 2/15/2002 2:35:00 PM Page 1 
FIGURE 2-50 The certification report for Test 1 showing that the short jumper cable 
passes CAT5e link test. 
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OMNIScanner2 Certification Report 


Circuit ID: Cut OMNiSeanner 

Project: TIA Project S500c8LO00377 SW: V06.00 
Owner: OMNISCANNER 2 Adapter 

Autotest: Cat SE Link GHAN SSRA 








Cable: Cat 5E UTP oe m | 
NVP: 72 L | 
Site: Las Cruces f i 
, Limit 12 
T ap a oe Length ft (308) 3 
pe pa aja Delay (ns): (518) 4 
Resistance (Ohms): =m — 
Wiremap Expected Actual 
OMNI: 12345676 ! 12345678 Skew (ns): (45) 3 
Remote: 12345678 ! 123 5678 Bandwidth (MHz): =e 
Attenuation Overall Margin (dB) 200| Return Loss Overall Margin (dB)!  — 
Pairs dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
2 03 M4 925 t 38 14 916 | 23 W414 8 976 
3 04 88 % 234 09 B75 26 101 886 
45 = = son 45 = = = — eas = 
78 03 28 ë %8 78 #234 113 990 37 16 g3 
NEXT Overall Margin (dB)! 112| ACR O Qverall Margin (dB — 
Pairs dB Margin MHz dB Margin MHz | Pairs dB Margin MHz dB Margin MHz 
12736 627 168 145 | #5SO2 1141 163 W360 =— ses zo =F = ane 
12/45 = == = — ‘a =| ms — Z = = Z 
13278 66 327 525 514 181 997 | 1278 a i n en 
36/45 > ak = | — 2 ns 645  — satis ae s = 
3878 579 46 H32 | 50 #12 1986| 378 — = == — — 
45/78 oe _ == | = — ae are — = = Z = 
ELFEXT Overall Margin (dB)" | PSNEXT Overall Margin (dB)" 11.6 
OMNIScanner OMNIRemote OMNIScanner OMNIRemote 
Pairs dB Margin MHz dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
we 6&0 20 113 | e3 z220 122| 32  — E a w a = 
12/45 — _ = =- — — 6 == == = == = — 
a78 60 %7 122 a53 29 1.6 45 ae wi = = m = 
3612 603 220 122 a9 20 113 78 = = = } = = = 
36/45 = = n = L = PSELFEXT Overall Margin (dB)" 9.9 
378 8667.0 279 11.1 663 265 12.9 OMNIScanner OMNIRemote 
46/12 ath = SA a EL ee Pairs dB Margin MHZ dB Margin MHz 
45/36 iis ae = ʻi si ini 12 = = a2 Š sas = 
45/78 am = = os nee = 36 si me = ini 5 a 
78123 853 2789 1.6 60 297 122 = jä g z E mre z 
7336 63 285 129 670) N9 1d Se Bg = = a = 
ae — = = - = — | PSACR Overall Margin (dB)"  — 
OMNIScanner OMNIRemote 
Pairs dB Margin MHz dB Margin MHz 
2 — a aa cat aie 
36 peas sass oes “ons oie is 
* Overall margin value is the worst margin for OMNI and Remote. “« — == Z Z = 
78 = = == —_ = ean 
W MICROTE ST’ Date: 2/16/2002 2:39:00 PM Page 1 


FIGURE 2-51 The results for Test 2 showing that the cable failed the CAT5e link test. 


é 90 Chapter2 e Physical Layer Cabling: Twisted Pair 


i A 
a 





OMINIE 


OMNIScanner2 Certification Report 











Circuit ID: Split Pairs OMNIScanner i OMNIRemote 
Project: TIA Project 50D99L00377 SW: V06.00 SOE99L00037 
Owner: OMNISCANNER 2 Adapter 
Autotest: Cat 5E Link 
Cable: Cat 5E UTP fu 
NVP: 72 | 
Las E=— ~ 
Eai Manufacturing Umt 2 ē E E n 
ai a Length ft (308) 45 45 47a? 
iái pan Delay (ns): (518) 64 64 6 8667 
Resistance (Ohms): (—) —_ === -=-= = 
Wiremap Expected Actual 
OMNI: 12345678 ! 12345678 Skew (ns): (45) 3 
Remote: 12345676 1 12345678 Bandwidth (MHz): = 
Attenuation Overal Margin (dB) -195| Return Loss Overall Margin (dB)" -5.4 
OMNIScanner OMNIRemote 
Pairs œ> dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
q2 1380 464 8 994 qv 16 53 23 | 115 +53 25 
3 (41.1 495 goo 368 1104 54 28 1106 52 23 


45 29 18.6 95.2 45 19.4 6.1 68.0 20.8 3.8 14 





FIGURE 2-52 The Test 3 CAT5e link test showing failures with attenuation. 


Test 4 Figure 2-53 shows the certification report for the cable tested in Test 4. This 
cable test generated a test result of FAIL. Examination of the certification report 
shows the cable failed the delay skew. This cable exceeds the maximum allowed by 
EIA/TIA 568B. Additionally, this cable fails attenuation, ELFEXT, and PSELFEXT 
tests. No, the cable should not be certified. 
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The measured delay skew of 47 ns exceeds the tester setting of 45 ns. The 
EIA/TIA 568B standard permits a delay skew of 50 ns, so actually this cable meets 
delay skew requirements for CAT5e cable. The specification set on the tester actually 
exceeds the CATSe requirements. Should the cable have been certified? Look at the 
length measurement for the 3-6 pair length. The cable is 1040 feet in length. Re- 
member, the maximum cable length for a CATSe cable run is 100 meters 














OMNIScanner?2 Certification Report FAIL 
Circuit ID: Long Box - OMNIScanner OMNIRemote 
Project: TIA Project 50099L00377 SW: 06.00 50ES9L00037 
Owner: OMNISCANNER 2 Adapter 
Autotest Cat 5E Link 
Cable: Cat 5E UTP 
NVF: 72 
= Las Čruces l . - = = 4 
eas Manufacturing Limit 1: a6 di zg 
Floor " d Length ft (308) 1068 i040 1050 1074 
i aie Delay (ns): (518) 1508 1144693 1482 1516 
Resistance (Ohms): {-—} — wees — == 
Wiremap Expected Actual 
OMNI: 12345678 12345678 Skew (ns): (45) 147 
Remote: 12345678 12345678 Bandwidth (MHz): = 
Attenuation Overall Margin (dB)! -21| Return Loss Overall Margin (dB) 4.9 
Pairs dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
12 #1727 -528 864 12232 70 #24 | 274 104 21 
36 1745 «541 8 898 1% 252 82 14 23 91 SOT 
45 1904 615 763 45 209 49 2775 | 26 76 1239 
78 i8234 -621 891 78 54 Ba 23 26 86 20 
NEXT Overall Margin (dB)" 76| ACR Overall Margin (dB)  —— 
OMNIScanner OMNIRemote OMNIScanner OMNIRemote 
Pairs dB Margin Pairs dB Margin MHz dB Margin MHz 
1236 603 138 “ae aa Se a a | 
1245 441 10.1 1245 — os aon mud 
1278 484 6.6 1278 oa = — a Si 
J645 651 8.1 645 — = ee eas n — 
3678 454 130 378  — S a ney 
4678 638 13.0 a578 — = xi ae sic — 
ELFEXT Overall Margin (dB) -211| PSNEXT Overall Margin dB)’ 9.4 
OMNIScanner OMNIRemote OMNIScanner OMNIRemote 
Pairs dB Margin MHz dB Margin MHz Pairs dB Margin MHz dB Margin MHz 
236 i51 -157 S16 | i75 -135 898 2 #479 11i 33 593 108 66 
T245 19.6 -11.4 92.5 144 -178 783 | 36 643 10.2 30 622 10.0 39 
1278 i30 -180 89.4 10.6 -204 89.1 | 45 647 9.4 25 62.1 99 a9 
3612 1130 87 83.0 111.2 91 9 96.1 | re O S5 107 O73 55 1O Bs 
345 i14 -208 783 | 156 161 828 PSELFEXT Overall Margin (dB)" -18.4 
3678 i83 -126 904 | 17 -194 891 OMNIScanner OMNIRemote 
4612 (77 -136 664 193-130 864] Pairs GB Margin MHz GB Margin Mhz 
466 (54 -163 62.6 | 18.1 4135 82.8 2 igo -133 86.4 16.2 -124 63.0 
T8 143 190 97 | 13 A97 891 3 113 A65 6 34 -146 898 
7812 i86 -131 830 167 -149 83.0 5 i pea r D 
78436 47 -162 898 me a34 å B| T m3 N. : E A. ee ty 
T845 iii -21.1 733 | Jag -172 ©6783 PSACR Overall Margin (dB) =- 
Pairs dB Margin MHz dB Margin M 
2 — = — mA i a 
36 E ae =e ae pees a 
* Overall margin value is the worst margin for OMNI and Remote. 45 — -—- =-=- — ae === 
7m å — i as E e saa ne 
MMICROTEST® | Date: 2/15/2002 2:02:00 PM Page 1 


FIGURE 2-53 A CAT5e link test showing failures with delay skew (Test 4). 
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Summary of CAT5e Cable Test Examples This section has provided a few ex- 
amples of CATSe link tests. The objective has been to provide actual test data for dif- 
ferent cable problems that might occur on the job. In the tests where a failure was 
detected, the tester displayed a failed screen, and the certification report identified the 
problem. The following is a summary of the tests: 


e Test 1: The certification report shows a test result of PASS. 

e Test 2: The certification report shows a test result of FAIL. The report shows 
the cable failed the wire-map test. 

e Test 3: This cable test generated a test result of FAIL. Examination of the at- 
tenuation and return-loss shows that the cable failed to meet CATSe attenuation 
and return-loss specifications. The cable also failed NEXT, ELFEXT, 
PSNEXT, and PSELFEXT tests. 

e Test 4: The certification report shows the cable fails the CATSe link test. Ex- 
amination of the report shows the cable failed the delay skew measurement be- 
cause the cable length exceeded the 100-meter maximum. The cable also fails 
attenuation, ELFEXT, and PSELFEXT tests. 


The reasons for examining the test results is to find out why a cable fails a test. You 
need to know whether the problem is with your terminations, cable layout, or the way 
the cable is installed. Keeping a record of the cable tests will help you isolate recur- 
ring problems. 

Tests 1 and 2 demonstrate the importance of keeping a record of tests. In this 
case, the cable was certified but later failed. The documentation provided by the cer- 
tification report provides evidence that the cable was functioning properly and did 
meet CATSe specifications. 
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SUMMARY 


This chapter introduced the basics of horizontal cabling and unshielded twisted-pair 
cable. The major topics the student should now understand include the following: 


e Six subsystems of a structured cabling system 

e The purpose of the telecommunication closet and the LAN work area 

e The performance capabilities of CAT6/S5e UTP 

e The wiring color schemes for T568A and T568B 

e The pin assignments for the RJ-45 (8P8C) modular plug 

e The technical issues of copper over 10G Ethernet 

e The procedures for testing a CAT6/Se link 

e The procedures for troubleshooting a CAT6/Se link 

e How to examine and use the test results provided by a CAT6/Se link certifica- 
tion report 


QUESTIONS AND PROBLEMS 


Section 2-2 


1. When was the first major standard describing a structured cabling system 
released? 
a. 1999 
b. 1989 
c. 1995 
d. 1998 
What doe EIA and TIA stand for? 
What are the three parts of the EIA/TIA 568-B standard? 
Identify the six subsystems of a structured cabling system. 
Which subsystem does permanent networking cabling within a building 
belong to? 
What is a cross-connect? 
7. What is the main cross-connect? 
8. The Telco and the ISP usually connect to what room in the campus network 
hierarchy? 
9. What is the WO, and what is its purpose? 
10. The patch cable from a computer typically terminates into which of the 
following? 
a. Jack in a wall plate 
b. BNC connector 
c. Thin net 
d. RJ-11 modular plug 
e. RG-59 
11. What is the over all length limitation of an individual cable run from the 
telecommunications closet to a networking device in the work area. 
12. A general rule of thumb is to allow how many meters for the cable run from the 
telecommunications closet to the work area? 


ae Te 


> 
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13. How many pins does an RJ-45 modular plug have? 

14. What is the difference in CAT 5 and CAT 5e? 

15. What is the data rate for Ethernet? 

16. What is the data rate for FastEthernet? 

17. What improvements will CAT6 and CAT7 cable provide? 
18. What is the data rate for gigabit Ethernet? 

19. What is a benefit of using shielded twisted-pair cabling? 
20. Which cable, UTP or STP, is preferred by the industry? 
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21. What are the color maps and pin # assignments for T568A and T568B? 

22. What is the difference between T568A and T568B? 

23. How many wires are in a CAT6 twisted-pair cable? 

24. How many wire pairs are in a CAT6 twisted-pair cable? 

25. In regards to a CAT6 cable, what pin numbers in an RJ-45 connecter are used 
to carry data in a FastEthernet network? 

26. What does an “X” on the input to a hub represent? 

27. Define the term cross-connected input. 

28. Draw a picture of properly aligned transmit and receive signal of a computer’s 
data link that is running Ethernet data rates. 

29. What is the difference between “straight” and “cross-connected” input ports? 

30. Draw the wire-map for a “cross over” CAT6 UTP cable running FastEthernet. 

31. Define a UTP link test. 

32. Define a UTP full channel test. 

33. Define the term NEXT and what it measures. 

34. A NEXT measurement of 59.5 dB is made on wire pairs 1—2/3—6. A next mea- 
surement of 51.8db is made on wire pairs 3—6/7—8. Which cable pairs have the 
best measure NEXT performance? 

35. Define Power-Sum measurements. 

36. Define propagation delay. 

37. Signals travel in a cable at some percentage of the velocity of light. The term 
of this is? 

38. Why is delay skew critical? 

39. Why are power-sum measurements critical for high-speed data communication 
over UTP? 

40. The expected attenuation loss of a 20m UTP cable should be (greater or less 
than) a 90m UTP cable? 

41. What is 8P8C, and what connector type is most associated with this? 

42. What are the pin assignments for 1/10 Gbps? 

43. What is the purpose of a lacing tool? 





Section 2-5 
44. What is the limit on the bend radius for a UTP cable, and why is this important? 
45. Is a high PSNEXT measurement desirable? 
46. Define margin (dB) relative to cable measurements. What does it mean if the 
margin lists a negative value? 
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47. Define Alien Crosstalk and draw a picture of how this can happen. 
48. What is F/UTP, and what is its purpose? 
49. Why is balance an issue in UTP cables, and what is TCL? 


Critical Thinking 
50. Answer the following questions for the certification report shown in Figure 
2-54. 


a. What is the length of pair 7—8? 
b. What is the length of pair 4-5? 
c. Why did this cable fail the test? 


CABLE TEST MANAGEMENT SOFTWARE 
Cable ID: CHAMISA D1011 Test Summary: FAIL 
Date / Time; 6012007 11:56.03am Operator: J.O. Model; DTX-1800 
Headroom: -0.4 dB (NEXT 36-45) Sofware Versione 1.3100 Main S/N: 9234019 
Test Limit: TIA Cat 6 Channel Limits Version: 1.0200 Remote SN 9234020 
Cable Type. Cat 6 UTP NVP. 69.0% Main Adapter. OTX-CHA001 
Remote Adapter: DTX-PLAGO! 

Wire Map (T5688) 

Pass 

lowe ee ee ee eee 1 

SIIN} | Senath (Rt, Limi 328 [Par78] 46 | | 4p merion Low 

n Prop. Delay (ns), Limit 555 [Para 72 © 
S www eee ee ee mme S Resistance (ohms) [Par 45) 23 3 
Tw eee ee eee meet 24 






PASS MAN SR | MAN SR | iO 
Worst Pair 3645 4535 %4S 45.36 es 
ELFEXT(d8) 134 133 152 49 
Freq. (MHz) 11 13 aS 295 9 
Limit (dB) 6&2 613 153 153 “ 
Worst Parr “5 45 45 38 0 
PSELFEXT (d8) 15.7 157 we 679 0 
Preg. (Mb) 1.1 10 2495 2495 
Linit (4B) $2 603 123 123 
Woest Pair 45 s45 3545 OAS wh 
ACR (cB) as 99 1S Və peth: 
Freq. (MHz) 79 68 meS m85 @ 
Limit (dB) 527 542 27 -27 ka 
Worst Pair 3 5 6 36 r 
PSACR (dB) 97 407 330 32 2 
Freq. (MHz) 75 70 248.0 248.0 (o Frequency (Mz) 20 o Fiegueacy MHE 20 
Limit (4B) 6 513 56 56 
PASS MAN SR | MAIN SR 3 
Worst Pair 78 45 45 45 8 
RL (d8) 35 49 50 50 
Freg. (MHz) 1245 2170 BS 2225 = 
Limit (dB) 11.0 66 66 83 um 
12 
o 





* Moasuromert is VEN Drs accuracy lings of Pe waivers. 
Lare Version 3.01 
Project CHAMISA 2000 A 
Site CHAMISA A2000 


_ Networks 





FIGURE 2-54 The certification report for problem 50. 
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51. Answer the following questions for the certification report shown in Figure 2-55. 
a. What is the length of wire pair 7—8? 
b. What is the delay skew for pair 4—5? 
c. Why did this cable fail the wire-map test? 


Wire Map (T5688) 
Pass 
l————e ee ee ee eee) 


a nm 
Sw ee mee S 


J =- eee ee eee eee? 


PTT MTSE 
sss Sia 











Woest Pair 
ACR (cB) 
Freq. (MHz) 








PSACR (dB) 47 76 
Freq, (MHz) 9.0 2395 
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FIGURE 2-55 The certification report for problem 51. 
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52. Answer the following questions for the certification report shown in Figure 2-56. 
a. Why did the cable fail the test? 
b. Draw the wire-map diagram for this cable. 










Dia 





12345678 1 12345679 Skew jns} (a8) au 
T 








Remote: 12345678 12547603 Bandwidih (MHz): = 
Attenuation Over Margin (dE)! 187| Retum Loss Overall Margin dB)"  — 
: OMNIRemos 

Pairs dÈ Margin MHz Pairs dE Margin MHz 
w i5 W7 ë i = 192 I wI " 
is = — a er] = — = a a — 
45 — — = A5 = = = = == — 
ee a R 
NEXT Charl Margin (36° —| ACR Overal Margin (d8) -= 
Pairs dB Marin MHI dE Margin MHI Pais dë Margin MHz dB Margin Mhe 
um - =- -| u =- me - = — 
WME — = — = | tis wae — -e eee = — 
127a = - — — =| am = = — m — — 
N å = = = =| W = = = -= æ = 
JETE = -_ = =| H = — Ss — >= = 
ELFEXT Dewal Margin dB)" — 

OMAIScannar OMMRemote | 
Pairs df Margin MHr dB Margin MHr 
1206 — = = = = =— 
ias = = = = = cat 
1278 =- = = = m = | 
Wi — — = = me ail 
Jaus - = = = = —_ | 
“wt = = =- =- = = 
452 = = = = = = | 
“ou - — = = = = 
art = = = = = — 
TEM 2 = = = = = 
THe = = = = = = 
Teas -= = = = = = 


Overall margin value bs the worl margin for OMNI and Remote. 





MMICROTEST* 


FIGURE 2-56 The certification report for problem 52. 
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3-1 INTRODUCTION 


This chapter presents an overview of the basic computer knowledge the LAN network 
administrator must have to work with today’s networks. It is important for the net- 
work administrator to have an excellent understanding of the computer hardware he 
or she will be working with prior to learning how to configure the network. Questions 
concerning the computer’s hardware will surface during network installation or dur- 
ing everyday network troubleshooting, and the better acquainted the administrator is 
with the computer hardware terminology, the easier his or her job will be. 

The motherboard connections and adapters for the network interface card are 
examined in section 3-2. This section reviews the many types of motherboard con- 
nections and adapters available for network interface cards and other computer cards. 
The purpose of device drivers is examined in section 3-3. This section includes steps 
for verifying device drivers in the Windows Vista/XP and Mac OS X operating sys- 
tems. It is not uncommon for a device driver to fail, requiring that the computer e1- 
ther be restarted or the device driver to be reloaded. 

Each computer operating system has a different suggested minimum memory 
requirement. Section 3-4 provides an overview of the suggested memory require- 
ments for the Windows and Mac operating systems. This section examines the dif- 
ferent types of memory modules currently available and how to check for the amount 
of installed memory. 

The network LAN administrator is typically responsible for upgrading the op- 
erating systems for the computers used in the LAN. A query asked when installing 
the newer operating systems is if the hard drive is to be formatted FAT or NTFS. Sec- 
tion 3-5 provides an overview of the FAT and NTFS file systems and discusses the 
advantages and disadvantages of each. The chapter concludes with a section on con- 
figuring the BIOS boot sequence. An example of configuring the boot sequence is 
offered. 


3-2 THE COMPUTER BUS CONNECTION 


Combo Terminations The purpose of the network interface card (NIC) is to provide an electrical interface 
The interface supports for the computer to the network. The NIC must have the proper termination for con- 
multiple types of media necting to the LAN media and the proper motherboard or adapter connection for con- 
connections necting to the computer. In the small office LAN example shown in Figure 3-1, CAT6 


cabling is used to connect the networking devices to the network. CAT6 cable is 
terminated with an RJ-45 modular plug; therefore, the NIC must have an RJ-45 mod- 
ular jack for connecting the patch cable from the wall plate to the computer. The NIC 
can also have combo terminations for supporting multiple types of network media 
such as UTP, fiber, or possibly a USB port. An example of a NIC card with a combo 
input supporting both RJ-45 and USB 2.0 connections is provided in Figure 3-2. 

The NIC also provides the proper protocol interface to the network. In the ex- 
amples presented in the text, the NIC provides the interface to an Ethernet network. 
This requires that the NIC be an Ethernet type running at 10/100/1000 Mbps or pos- 
sibly 10 Gbps. The speed choice depends on the capability and configuration for your 
LAN. The NIC also contains the Mac address, which provides the source or destina- 
tion address of packets (refer to Chapter 1 for a complete discussion on NICs). 
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nue Laser printer 


CAT6 cable 


FIGURE 3-1 A small office LAN. 





FIGURE 3-2 A combo network interface card with both an RJ-45 and two USB type A 
female adapters (courtesy of StarTech.com). 


Motherboard Bus Connections 


The objective of this section is to help acquaint the reader with the different types of 
motherboard bus connections available for NICs. Some of the bus connections men- 
tioned also support other hardware technologies such as hard drives, USB connec- 
tions, video cards, sound cards, and so on. It is important for the network 
administrator to be familiar with the type of bus interconnects that are available. You 
don’t know for certain which computer bus connection you will need until you have 
opened the computer chassis and examined the motherboard. A discussion of the 
most common computer bus technologies follows. 


e PCI—Peripheral Component Interconnect. PCI is the best bus choice for current PCI 
computers. PCI supports 32- and 64-bit implementations (see Figure 3-3). 


e THE COMPUTER BUS CONNECTION 
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ISA e [SA—Industry Standard Architecture. Allows for 16-bit data transfers between 
the motherboard and the expansion board (see Figure 3-4). 





FIGURE 3-3 A network interface card using a PCI bus connection (courtesy of 
StarTech.com). 





FIGURE 3-4 A network interface card with an ISA motherboard connection (courtesy of 
Cyberguys.com). 





EISA e EISA—Extended Industry Standard Architecture. EISA extends the ISA bus to 

USB 1.1 32-bit data transfers. 

USB 2.0 e USB 1.1—Universal Serial Bus. This interface supports data rates up to 12 
Mbps. The USB interface does not require that the computer be turned off or 
rebooted to activate the connection. 

e USB 2.0—Universal Serial Bus. This USB interface supports data rates up to 
480 Mbps and is used when connecting a USB adapter to a 100 Mbps network. 
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The original specification for the USB connection provided for two types of connec- 
tors, Type A and Type B, shown in Figure 3-5 (a and b). Currently, five types of USB 
connectors are available for use with a variety of devices including smartphones, 
PDAs, and cameras. A picture of the five types of USB connectors is provided in Fig- 
ure 3-5(c). The USB cable length is limited to 5 meters (approximately 16 feet). 


e IEEE 1394 (Firewire, i-Link)—A high-speed, low-cost interconnection stan- IEEE 1394 (Firewire, 
dard that supports data speeds of 100 to 400 Mbps. [Figure 3-6(a) and (b)] i-Link) 
e SCSI—Small Computer System Interface. Consists of a SCSI host adapter, SCSI 
SCSI devices such as hard drives, DVD, CD-ROM, and internal or external 
SCSI cables, terminators, and adapters. There are several benefits of using the 
SCSI interface. It is a fairly fast interface, up to 320 megabytes per second 
(MBps), and an additional benefit is that the SCSI interface has been around for 
more than 20 years. It has been thoroughly tested and is known to be very reli- 
able (see Figure 3-7[a] and [b]). 





Micro USB Mini USB B-Type A-Type A-Type 
Plug Plug Plug Receptacle Plug 


(c) 


FIGURE 3-5 (a) USB card (courtesy of Cyberguys.com). (b) Type A and B USB cables 
(courtesy of StarTech.com). (c) A group picture of the five types of USB connectors: micro 
USB plug, mini USB plug, B-type plug, A-type plug, and A-type receptacle. 


e [DE—Integrated Drive Electronics. Standard electronic interface between the IDE (PATA) 
computer’s motherboard and storage devices such as hard drives. The IDE in- 
terface is now known as PATA, the Parallel Advanced Technology 
Attachment. The data transfer speeds for IDE (PATA) are slower than SCSI (see 
Figure 3-7 [a] and [b]). 
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6-Pin (Female) 





6-Pin (Male) 





(c) 


FIGURE 3-6 (a) Firewire interface card. (b) Firewire cable. (c) A composite view of 4-, 6-, 
and 9-pin Firewire connectors (Courtesy of StarTech.com). 








(a) (b) 


FIGURE 3-7 (a) SCSI interface card; (b) SCSI cable (courtesy of StarTech.com). 


SATA e SATA—Serial Advanced Technology Attachment. This technology was devel- 
AGP oped to replace IDE (PATA) technology. SATA devices provide data transfer 
Interrupt Request (IRQ) speeds of 3 Gbps, and new versions of SATA devices are expected to support 


6-Gbps data transfers (see Figure 3-8). 

e AGP—Accelerated Graphics Port. For use in high-speed 3D graphics applica- 
tions (see Figure 3-9). 

¢ Interrupt Request (IRQ)—The IRQ number determines where a computer’s 
CPU should look for an interrupt request from a hardware device such as the 
network interface card. Today most NICs are plug and play, which means the 
computer operating system will select the proper IRQ for your NIC. In older or 
legacy systems the IRQ had to be manually set, or you had to contact the ven- 
dor to obtain the proper IRQ number. 
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FIGURE 3-8 (a) 2-port Serial ATA and 1-port ATA/133 IDE PCI card (b) SATA cable 
(courtesy of StarTech.com). 


emraerie 


PANNE 


* 
a“ 


Aialaiainialainisia 





FIGURE 3-9 AGP video card (courtesy of Cyberguys.com). 


3-3 DEVICE DRIVERS 


The device drivers are the software installed on the computer that interfaces the op- Device Drivers 
erating system with the hardware or to the network. The new computer operating sys- Interface the operating 
tems come preloaded with device drivers for the most common hardware. The system to the hardware 
computer detects the hardware and automatically installs the proper driver. This is a 

feature of “plug and play” architecture. However, the drivers for newly developed 

hardware will not come with the operating system CD-ROM. In this case, the software 

device driver must be installed. The device driver typically comes preloaded on a CD- 

ROM. It is always best to use the driver that comes with the hardware if you aren’t sure 

about the driver. If you can’t find the driver disk that came with the hardware or you 
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can’t find the proper driver preloaded in the operating system, go to the manufacturer’s 
website and search for and download the driver. If this doesn’t work, do a generic 
search on the Web for the device driver you need. Use caution and make sure you are 
using a reliable site to download the device driver. The steps for displaying and veri- 
fying the device drivers for Windows Vista, XP, and the Mac OS X are listed next. 


Verifying Device Drivers on Windows Vista/XP 
To verify the device drivers for Windows Vista/XP, follow these steps: 


1. In Vista, right-click Computer and select Properties. This opens the System 
Properties Window. Click Continue. The Device Manager window will be 
displayed as shown in Figure 3-10. 


To enter the device manager in Windows XP, right-click My Computer and se- 
lect Properties—Hardware—Device Manager. The Device Manager win- 
dow will be displayed. 
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FIGURE 3-10 The System Properties menu in Vista. 


2. To display the hardware connected to your system, click the plus (+) sign next 
to the device. Double-click the device name. This opens the Properties window 
for the selected device. Figure 3-11 provides an example. 

Figure 3-12 shows an arrow pointing to the yellow exclamation point next to 
the PCI modem device. This denotes a nonworking driver for the PCI modem. 

3. Double-click the failed device to check the status of the driver for the PCI mo- 
dem. This opens the Properties window for the PCI modem (see Figure 3-13). 
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To view details about the driver files. 


To update the driver software for this device. 





f the device fails after updating the driver, roll 


Roll Back Driver back to the previously installed driver. 


Disables the selected device. 


To uninstall the diver (Advanced). 





FIGURE 3-11 The Device Properties menu in Vista. 
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FIGURE 3-12 The Device Manager window. 


4. To check the driver details, click the Driver tab in the Properties window (Fig- 
ure 3-13). In this window you have the option of getting more driver details or 
of updating, rolling back, disabling, or uninstalling the driver. Figure 3-14 
shows the window for the driver tab. 
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Device type: 
Manufacturer: 
Location: 
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The drivers for this device are not installed. (Code 28) 


To reinstall the drivers for this device, click Reinstall Driver. 
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To view details about the driver files. 


To update the driver software for this device. 
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Disables the selected device. 


To uninstall the diver (Advanced). 


FIGURE 3-14 The Driver tab menu for the failed driver. 


Verifying Device Drivers on Mac OS X 


To view and verify the device drivers installed on a Mac OS X computer, click the 
Apple icon—About this Mac. This opens the About this Mac window. Click More 
Info.... This opens the System Profile window as shown in Figure 3-15. Click Ex- 
tensions under the Software contents located on the left side of the window. This 
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opens up a list of drivers in the System Profile window (Figure 3-16). The state of a 
driver can be viewed by selecting the driver and examining the comments at the bot- 
tom of the System Profile window. Figure 3-17 shows an example. In this example, 
the IODVDStorageFamily driver has been selected. The status of the driver shows 
that it is not currently loaded as indicated by the arrow. 


System Profile 


Contents i Hardware Overview: 
Hardware 


Memory Machine Model: PowerBook G4 15" 


CPU Type: PowerPC G4 (1.1) 


PCI/AGP Cards Number Of CPUs: 1 
ATA CPU Speed: 1.5 GHz 
SCSI L2 Cache (per CPU): 512 KB 


USB Memory: 512 MB 

tee Bus Speed: 167 MHz 
FireWire Boot ROM Version: 4.8.6f0 
AirPort Card Serial Number: W842 130YQHY 
Modems 


Y Software 
Applications 
Extensions 

Network 
Logs 





FIGURE 3-15 The System Profile window for Mac OS X. 


eAe System Profile 


hollymac 10/23/07 11:15 AM 
Contents Extension Name § Version Last Modified 


Y Hardware 1OPCIFamily 1.4 3/22/04 10:59PM. P 
Memory lOPlatformFunction 1.6.1 1/12/05 11:22AM. | 
PCI/AGP Cards lOPlatformPluginFamily 1.5.5 3/30/05 9:48 PM 
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USB lOSCSIFamily 1.3.7 11/7/04 5:22 PM 
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AirPort Card lOSCSIReducedBlockCommandsDevice 3/30/05 9:19 PM 
Modems \OSerialFamily 3/30/05 9:28 PM 
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Extensions \OUSBFamily 3/30/05 9:21 PM 

Network IOUSBHIDDriver 1/27/05 7:11 AM 
Logs ~ |OUSBHIDDriverSafeBoot 1/27/05 7:11 AM 
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IOUSBUserClient ue 1/27/05 7:11 AM 
IPFirewall 3/22/04 10:56 PM 
iPodDriver .0. 11/7/04 5:16 PM 
iPodFireWireTransportSupport 11/7/04 5:16 PM 
iPodSBCDriver 11/7/04 5:16 PM | 
E&R Ja 








FIGURE 3-16 A list of the drivers for Mac OS X. 
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FIGURE 3-17 An example of a driver that is not currently loaded for Mac OS X computer. 


3-4 COMPUTER MEMORY 


Each operating system has a suggested minimum memory, or random access mem- 
ory (RAM), requirement. Table 3-1 lists the suggested memory requirements for 
eight different Windows operating systems. The bottom line is, install as much mem- 
ory as the motherboard of your server can support. Client computers can typically op- 
erate without having the maximum amount of memory available. (Of course, this 
depends on the application software running on the client computer.) The selection of 
memory for your computer depends on the motherboard. 


TABLE 3-1 Suggested Memory Requirements for Windows and Mac 
Operating Systems 


Operating System Recommended Memory 


64 MB to 128 MB 
256 MB or more 
512 MB or more 
128 MB or more 
512 MB or more 
1 GB or more 

2 GB or more 
256 MB or more 
512 MB or more 
1 GB or more 


Windows 98 

Windows XP 

Windows Vista 

Windows 2000 (Professional) 
Windows 2000 (Server) 
Windows 2003 (Server) 
Windows 2008 (Server) 

Mac OS X 

Mac OS X (Leopard) 

Mac OS X (Server) 
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Types of Memory 


Computer memory comes in many types. The selection for your computer depends 
on what type can be mounted on your computer’s motherboard. Table 3-2 lists the dif- 
ferent types of memory used in today’s computer motherboards. 


TABLE 3-2 Different Types of Memory 


Memory Type Definition 

DIMM Dual in-line memory module. Supports 64-bit data transfers; DIMM 
168 pins on the memory module. DRAM 

DRAM Dynamic random access memory. Each bit is stored ina cell, ECC RAM 
and the cell must be periodically refreshed to retain the EDO RAM 
stored information; replaced by SDRAM. SDRAM 

ECC RAM Error-Correcting Code Random Access Memory. This type of DDR SDRAM 
memory checks the data for errors as it passes through the DRD RAM (RDRAM) 
memory device. DDR2 SDRAM 

EDO RAM Extended data-out RAM. Better speed performance than 
DRAM; replaced by SDRAM. 

SDRAM Synchronous DRAM. Synchronizes memory access with the 


CPU for faster data transfers; a block of data can be 
transferred to the CPU while another block is being set up 
for transfer. 


DDR SDRAM Double-data-rate SDRAM. Transfers data on the edges of the 
system clock, speeding up the data transfer. 

DRD RAM (RDRAM) Direct RAMBUS DRAM. Used with high-end Intel computers; 
also called PC800, based on doubling the bus rate of the 
Pentium 4. 

DDR2 SDRAM Double-Data-Rate two Synchronous Dynamic Random Access 


Memory is used in high-speed computer and digital 
electronic devices. 


The quickest way to check for the amount of RAM installed on a Windows 
computer is to simultaneously press the Windows and Pause/Break keys on the 
computer’s keyboard. The keys are shown in Figure 3-18. The amount of memory in- 
stalled on a Mac OS X computer can be display by clicking Apple—About This 
Mac. This opens the About This Mac window, and the type of memory and amount 
are displayed as shown in Figure 3-19. 


Pause 
Break 


FIGURE 3-18 The Windows and Pause/Break keys used to check the computer's installed 
memory. 
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About This Mac 


7 
i 
me 





Mac OS X 


Version 10.3.9 
{ Software Update... ) 


Processor 1.5 GHz PowerPC G4 
Memory 512 MB DDR SDRAM 
{ More Info... ) 


TM & © Apple Computer, Inc. 1983-2004 
All Rights Reserved. 





FIGURE 3-19 The About This Mac window showing the type and amount of memory 
installed. 


3-5 AN OVERVIEW OF FAT AND NTFS 


The local network administrator is responsible for maintaining the network and the 
computers in the LAN. This same person spends a lot of time upgrading the operat- 
ing system and programs. When a new operating system is installed, the hard drive 
will need to be reformatted. The installer will have to make a choice for the type of 
format used: FAT or NTFS. The following discussion outlines these file formats and 
lists the advantages and disadvantages of each. 


FAT 
FAT FAT stands for “file allocation table.” The purpose of the file allocation table is to 
File allocation table keep track of where the file information is located on the media (for example, hard 
drive, Zip disks, 3.5" disks, and so on). A disk that is formatted using FAT allocates 
ee , clusters on the disk for storing information such as the file and directory data. This 
Storage area for files and } sa i 
P arias is called the data area of the partition. The FAT keeps a record of the cluster location 
for the file. For large files, this requires that multiple clusters be used and a record 
FAT16 kept of each. Files are given the first available space on the drive. 
Uses a 16-bit file allocation The FAT system is also called FAT16. The 16 indicates the number of bits for 
table the file allocation table. The FAT16 system creates 2'° clusters. The FAT16 file sys- 


tem works best for hard drives or partitions that are 200 MB or smaller in size. The 
overhead for a FAT file system degrades the performance of the file access, but most 
importantly it isn’t possible to set file permissions in FAT 16 partitions. Table 3-3 pro- 
vides a summary of the advantages and disadvantages of the FAT16 system. 
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TABLE 3-3 Advantages and Disadvantages of the FAT16 File 


System 

Advantages Disadvantages 

FAT16 works best for hard drives or 200 MB hard drive or partition size limitation 
partitions that are 200 MB or less for optimal performance 

in size Not possible to set file permissions in the FAT 
FAT16 uses very little overhead partitions 


Filename size is limited to 8.3 characters (eight 
characters plus three more after the decimal) 
FAT partitions are limited to a maximum of 4 GB 
in Windows NT and 2 GB in DOS 


FAT32 


FAT32 is an improvement over the FAT16 system. FAT32 uses a 32-bit file allocation FAT32 

table but four bits are reserved; therefore, FAT32 produces 2°8 clusters. FAT32 sup- Uses a 32-bit file allocation 
ports hard drives up to 2 terabytes in size. It uses variable cluster sizes to more effi- table 

ciently use the disk space. The FAT32 system is less susceptible to disk data failures. 

Table 3-4 provides a summary of the advantages and disadvantages of FAT 32. 


TABLE 3-4 Advantages and Disadvantages of the FAT32 File 


System 

Advantages Disadvantages 

Supports up to 2 terabytes of disk space No built-in file security system 

Less susceptible to disk data failures No built-in data compression scheme 

A better use of disk space Cannot be used with Windows NT 
NTFS 


NTFS is the New Technology File System developed by Microsoft Corporation. NTFS 

NTFS was developed to address the need for improved reliability, security and access New Technology File System 
control, size barriers, storage efficiency, and the use of long filenames in an operat- 

ing system. Table 3-5 provides a summary of the advantages and disadvantages of the 

NTES system. 


TABLE 3-5 Summary of NTFS Advantages and Disadvantages 


Advantages Disadvantages 
Reliability—the ability to recover from problems The overhead for NTFS is 
without the loss of data approximately 4 MB of disk 


Security and access control—control access to files Space on a 100-MB partition 
and file folders 

Size barriers—allow for very large disk partitions 

Storage efficiency—improvement in the method 

for allocating space to files 

Long filenames—allow filenames up to 255 characters 
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3-6 CONFIGURING THE BIOS BOOT SEQUENCE 


Boot Sequence The network LAN administrator is responsible for maintaining all aspects of the LAN, 
The order in which the including tasks such as performing hardware and software upgrades. In some cases, the 
computer selects a drive for administrator must make changes to the computer’s boot sequence, especially when 
loading the computer's boot reloading or upgrading a computer’s operating system. For example, a software up- 
Instructions: grade might require the use of a CD-ROM boot disk. The boot sequence might be set 
BIOS (Basic Input to first look for the information in a 3.5 disk and then the hard drive. This requires the 
Output System) ne 

Pantano trebas: network Bomar to enter the computer’s BIOS and change the boot sequence. 
instructions needed by the The computer’s BIOS (Basic Input Output System) contains the basic instructions 
computer to operate needed by the computer to initialize. The boot sequence is the order in which the com- 

puter selects the drive for loading the computer’s boot (initialization) instructions. 

Entering the boot sequence on the computer varies for each manufacturer of 
computer motherboards. You might press F2 or the Delete (del) key when instructed, 
or in some cases you might not even receive a prompt saying “press this key” to en- 
ter the BIOS. Entering the BIOS setup mode for the computer allows the user to mod- 
ify parameters such as setting the boot sequence and interrupt requests. 

When the computer boots, it looks for instructions in the BIOS for where to 
search for a disk containing the operating system it needs to load. The boot sequence 
defined in the BIOS instructs the computer in what order and where to look for the 
operating system. The operating system could be on the CD-ROM, the hard drive, or 
the 3.5 disk. Additionally, each disk is assigned a drive letter (A, B, C, and so on) by 
the connection to the disk controller. 

In the BIOS, you can specify the order of the boot sequence by selecting the 
Boot Sequence menu and then selecting where your computer should look first. For 
example, the boot sequence order listed could be as follows: 


1. On Board or USB Floppy Drive 
On Board SATA Hard Drive 

On Board PATA Hard Drive 

On Board or USB CDROM Drive 
On Board Network Controller 
USB Device 


oS aN 


In this example, the boot sequence is set so that the computer looks first at the On 
Board or USB Floppy Drive. 
Typical instructions are: 


1. Select the device you want to change the order. 
2. Press (+) or (-) to move the device up or down. 


For example, to make the On Board or USB CD-ROM drive the boot drive, select On 
Board or USB CDROM Drive (#5) and then press the plus (+) key three times. This 
changes the order for the boot sequence to the following: 


1. On Board or USB CDROM Drive 
On Board or USB Floppy Drive 
On Board SATA Hard Drive 

On Board PATA Hard Drive 

On Board Network Controller 
USB Device 


ae 


The computer is now set to boot from the On Board or USB CD-ROM drive. This 
boot sequence is the preferred order in today’s computers. 
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SUMMARY 


This chapter has presented an overview of the introductory computer knowledge 
needed for a network LAN administrator to function in today’s Windows-based com- 
puter systems. The student should understand the following: 


e The different types of motherboard connections 

e How to verify device drivers 

e How to check for installed computer memory and the minimum requirements 
needed for different operating systems 

e The advantages and disadvantages of FAT and NTFS 

e How to configure a computer’s BIOS boot sequence 


QUESTIONS AND PROBLEMS 


Section 3-2 


1. What is the purpose of the network interface card? 

What is currently the best computer bus technology? 

What is an advantage of USB? 

What is the other name for the IDE interface? 

If transfer speed is the issue, which interface should be selected, SCSI or 

SATA? 

6. What is the limit on cable length for USB cables? (hint: Search the Internet for 
the answer.) 


oe eS 


Section 3-3 


7. What does a computer use to interface the computer hardware to the computer? 
8. What symbol is used to indicate a failed device driver in Windows XP? 


Section 3-4 


9. What is the command sequence for checking the amount of installed memory 
(a) on a Windows computer (b) on a Mac OS X computer? 
10. What is the suggested memory requirement for the following: 
a. Windows Vista workstation? 512 MB or more 
b. Windows 2008 server? 2 GB or more 
c. Windows 2003 Server? 1 GB or more 
11. A userin the network is running Windows 95 on his computer. A software pack- 
age he wants to run requires 128 MB. What is your recommendation regarding 
the operating system and memory requirements? Justify your answer. 
12. What is SDRAM? 
13. What is DDR2 SDRAM? 
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Section 3-5 


14. What is a cluster? 
15. Which of the following are advantages of the FAT16 file system? 
a. A better use of disk space 
b. Uses little overhead 
c. 216 clusters 
d. Setting file permissions 
16. Which of the following are advantages of the FAT32 file system? 
a. A better use of disk space 
b. Setting file permissions 
c. Supports up to 2 terabytes of disk space 
d. Less susceptible to point data failures 
17. Which of the following are true about NTFS? 
a. Improved security access control 
Recommended for use with 3.5? disks 
. More reliable than FAT32 
. Allows the use of long file names 
. Developed by IBM for Microsoft 


oae g 
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18. Why is boot sequence order important? 
19. What is the procedure for entering the boot sequence on the computer? 
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CHAPTER OUTLINE 


4-1 Introduction 

4-2 The OSI Model 

4-3 The Network Bridge 
4-4 The Network Switch 
4-5 The Router 


OBJECTIVES 


e Define the OSI model and its application to 
computer networks 

e Describe how a bridge is used to interconnect 
LANs 

e Describe how a switch is used to interconnect 
LANs 

e Discuss the advantages of using a switch in- 


4-6 Interconnecting LANs with the Router 


4-7 Configuring the Network Interface— 
Auto-negotiation 


Summary 


Questions and Problems 


Describe the function of a router when used 
to interconnect LANs 

Describe the interface associated with a 
router 

Describe the function of a gateway in a com- 
puter network 

Describe the concept of a network segment 


stead of a hub 


KEY TERMS 


campus network 
OSI 

OSI model 
physical layer 
data link layer 
network layer 
transport layer 
session layer 
presentation layer 
application layer 
bridge 

bridging table 
association 
broadcast storm 
network slowdown 
ARP cache 

ARP table 
transparent bridge 
translation bridge 
layer 2 switch 


e Describe the concept of auto-negotiation 


multiport bridge 
multicast 

managed switch 
Cisco Network Assistant 
(CNA) 

dynamic assignment 
static assignment 
secure addresses 
aging time 

isolating the collision 
domain 


CAM (content addressable 
memory) 


flooding 

broadcast domain 
store-and-forward 
cut-through 

switch latency 

error threshold 
multilayer switch (MLS) 
wire speed routing 


network address 
logical address 
router interface 
power on/off 
auxiliary input 
console input 
serial ports 

AUI port 

media converter 
enterprise network 


FastEthernet port (FA0/0, 
FA0/1, FA0/2, ...) 


serial port (S0/0, S0/1, 
S0/2, ...) 


routing table 
gateway 
auto-negotiation 
fast link pulse (FLP) 
half duplex 
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4-1 INTRODUCTION 


Campus Network The utility of LANs led to the desire to connect two (or more) networks together. For 
A collection of two or more example, a large corporation may have had separate networks for research and engi- 
interconnected LANs in a neering and another for its manufacturing units. It was probable that these network 
limited geographic area systems used totally different networking technologies and specifications for com- 


municating and were located in different cities, states, or even countries, but it was 
deemed necessary to “tie” them together. The objective of this and subsequent chap- 
ters is to introduce the concepts and issues behind interconnecting LANs. Intercon- 
necting LANs in a campus network or even interconnecting LANs in wide-area 
networks (WANs) incorporate similar concepts and issues. The campus network is a 
collection of two or more interconnected LANs, either within a building or housed 
externally in multiple buildings. 

The framework defining the network layers for linking networks together is de- 
fined by the OSI model, introduced in section 4-2. The OSI model provides a frame- 
work for networking that ensures compatibility in the network hardware and 
software. The concepts behind the hardware technologies used to interconnect LANs 
are presented in sections 4.3 to 4.5. The properties of a networking bridge are defined 
in section 4-3. The layer 2 switch is examined in section 4-4, and the router is intro- 
duced in section 4-5. An example of interconnecting LANs is provided in section 
4-6. The chapter concludes with a section on the concept of auto-negotiation, exam- 
ining the advantages and disadvantages of this network configuration option. 


4-2 THE OSI MODEL 


OSI An open systems interconnect (OSI) reference model was developed by the Interna- 
Open system interconnect tional Organization for Standardization in 1984 to enable different types of networks 
to be linked together. The model contains seven layers, as shown in Figure 4-1. These 
OSI Model j l . l . . 
PI ayers describe networking functions from the physical network interface to the soft- 
The seven layers describing bash , 
search nneone ware applications interfaces. The intent of the OSI model is to provide a framework 
for networking that ensures compatibility in the network hardware and software and 
to accelerate the development of new networking technologies. A discussion of the 
OSI model follows and a summary of the seven layers appears in Table 4-1. 


FIGURE 4-1 The seven layers of the OSI reference model. 
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TABLE 4-1 Summary of the OSI Layers 


Layer Function Examples 

7. Application support for applications HTTP, FTP, SMTP 
(email) 

6. Presentation protocol conversion, data translation ASCII, JPEG 

5. Session establishes, manages, and terminates sessions NFS, SQL 

4. Transport ensures error-free packets TCP, UDP 

3. Network provides routing decisions IP, IPX 

2. Data link provides for the flow of data MAC addresses 

1. Physical signals and media NICs, twisted-pair 


cable, fiber 


1. Physical layer: Provides the electrical and mechanical connection to the net- Physical Layer 
work. Examples of technologies working in this layer are EIA/TIA related Data Link Layer 
technologies, UTP, fiber, and NICs. Network Layer 

2. Data link layer: Handles error recovery, flow control (synchronization), and Transport Layer 
sequencing (which terminals are sending and which are receiving). It is con- Session Layer 
sidered the “media access control layer” and is where MAC addressing is de- Presentation Layer 
fined. The Ethernet 802.3 standard is defined in this area, which is why the Application Layer 
MAC address is sometimes called the Ethernet address. 

3. Network layer: Accepts outgoing messages and combines messages or seg- 
ments into packets, adding a header that includes routing information. It acts as 
the network controller. Examples are IP and IPX. 

4. Transport layer: Is concerned with message integrity between source and des- 
tination. It also segments/reassembles (the packets) and handles flow control. 

Examples are TCP and UDP. 

5. Session layer: Provides the control functions necessary to establish, manage, 
and terminate the connections as required to satisfy the user request. Examples 
are NFS and SQL. 

6. Presentation layer: Accepts and structures the messages for the application. It 
translates the message from one code to another if necessary. This layer is re- 
sponsible for data compression and encryption. Examples are ASCI and 
JPEG. 

7. Application layer: Interacts with application programs that incorporate a com- 
munication component such as your Internet browser and email. This layer is 
responsible for logging the message in, interpreting the request, and determin- 
ing what information is needed to support the request. Examples are HTTP, 

FTP, and SMTP. 


Note 


Network administrators often describe networking problems by layer number. For example, a 
physical link problem is described as a layer 1 problem; a router problem is layer 3. 


The network administrator uses the OSI model to troubleshoot network prob- 
lems by verifying functionality of each layer. In many cases, troubleshooting the net- 
work problem requires the network administrator to isolate at what layer the network 
problem occurs. 


Section 4-2 e THE OSI MODEL 


S 0 


123 


For example, assume that a network is having problems accessing an email 
server that uses SMTP, a layer 7 application. The first troubleshooting step for the 
network administrator is to ping the IP address of the email server (layer 3 test). A 
“ping” to an IP address can be used to check quickly that there is a network connec- 
tion. A “reply from” response for the ping indicates the connection to the server is up. 
A “request timed out” response indicates the network connection is down. This could 
be due to a cabling problem (layer 1) or a problem with a switch (layer 2) or a router 
(layer 3), or the email server could be completely down (layer 7). In the case of “‘re- 
quest timed out” the network administrator will have to go directly to the telecom- 
munications closet or the machine to troubleshoot the problem. In this case, the 
administrator should first check for layer 1 (physical layer) problems. Many times 
this just requires verifying that a network cable is connected. Remember the concept 
of checking for a link light? Cables do get knocked loose or break. 

The network administrator needs to have a good understanding of all seven lay- 
ers of the OSI model. Knowledge of the layers can help to isolate the network prob- 
lem. There are three basic steps in the process of isolating the network problem: 


e Is the connection to the machine down? (layer 1) 
e Is the network down? (layer 3) 
e Is a service on a specific machine down? (layer 7) 


This chapter continues with an introduction to the concepts behind assembling LANs 
together in a campus network. A campus network consists of interconnecting multi- 
ple LANs in multiple buildings together in a limited geographic area. The hardware 
used to interconnect the LANs in a campus network is presented in sections 4-3, 4-4, 
and 4-5. This discussion introduces bridges, switches, and routers. 

By this time the need for good networking documentation becomes apparent. 
A centralized database for the campus network becomes essential. The database 
should include network documentation and network address assignments. The need 
for careful documentation is discussed throughout the text. 


4-3 THE NETWORK BRIDGE 


Bridge A bridge is used in computer networks to interconnect two LANs together and sepa- 
A networking device that rate network segments. Recall that a segment is a section of a network separated by 
uses the MAC address to bridges, switches, and routers. The bridge is a layer 2 device in the OSI model, mean- 


forward data and 


ing that it uses the MAC address information to make decisions regarding forward- 
interconnect two LANs 


ing data packets. Only the data that needs to be sent across the bridge to the adjacent 
network segment is forwarded. This makes it possible to isolate or segment the net- 
work data traffic. An example of using a bridge to segment two Ethernet LANs is 
shown in Figure 4-2. The picture shows that LAN A connects to port | of the bridge, 
and LAN B connects to port 2 on the bridge, creating two segments, as shown. There 
are four computers in LAN A and three computers in LAN B. 


Bridging Table Bridges monitor all data traffic in each of the LAN segments connected to its 
List of MAC addresses and ports. Recall that a port is an input/output connection on a networking device. The 
port locations for hosts bridges use the MAC addresses to build a bridging table of MAC addresses and port 
connected to the bridge locations for hosts connected to the bridge ports. A sample bridging table is provided 
pores in Table 4-2. The table shows the stored MAC address and the port where the address 


was obtained. 


124 —. Chapter4 e interconnecting the LANs 


The source MAC address is stored in the bridge table as soon as a host talks 
(transmits a data packet) on the LAN. For example, if computer 1 in LAN A sends a 
message to computer 2 (see Figure 4-2), the bridge will store the MAC addresses of 
both computers and record that both of these computers are connected to port 1. If 
computers 5 or 6 are placing data packets on the network, then the source MAC ad- 
dresses for 5 and 6 are stored in the bridge table, and it is recorded that these com- 
puters connect to port 2 on the bridge. The MAC addresses for computers 3 and 4 will 
not be added to the bridging table until each transmits a data packet. 






Segment 


FIGURE 4-2 Using a bridge to interconnect two Ethernet LANs. 


TABLE 4-2 Bridging Table 


MAC Address Port 


00-40-96-25-85-BB 
00-40-96-25-8E-BC 
00-60-97-61-78-5B 
00-CO-4F-27-20-C7 


PO Ne FR 


The bridge monitors the data on its ports to check for an association between Association 
the destination MAC address of the Ethernet frames to any of the hosts connected to Indicates that the 
its ports. An association indicates that the destination MAC address for a host is con- _4estination address is for a 
nected to one of the ports on the bridge. If an association is found, the data is for- networking device connected 
warded to that port. For example, assume that computer 1 sends a message to BN ie POTES DOTMIE 
i i —_ bridge 
computer 5 (see Figure 4-2). The bridge detects an association between the destina- 
tion MAC address for computer 5 and port 2. The bridge then forwards the data from 
computer | to computer 5 in LAN B via port 2. 
The capability of a bridge to forward data packets only when there is an asso- 
ciation is used to isolate data traffic in each segment. For example, assume that com- 
puter 1 and computer 2 in LAN A generate a lot of data traffic. The computers in LAN 
B will not see any of the data traffic as long as there is not an association between the 
destination MAC addresses of the Ethernet packets and any of the hosts in LAN B 
(computers 5, 6, and 7). 
A potential problem with bridges has to do with the way broadcasts are han- 
dled. All broadcasts in a LAN will be forwarded to all hosts connected within the 
bridged LANs. For example, the broadcast associated with an ARP will appear on all 
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S UREN A 


Broadcast Storm 
Excessive amounts of 
broadcasts 


Network Slowdown 
Degraded network 
performance 


ARP Cache 
Temporary storage of MAC 
addresses recently contacted 


ARP Table 
Another name for the ARP 
cache 
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hosts. In the address resolution protocol (ARP—see Chapter 1), a broadcast is sent to 
all hosts in a LAN connected to the bridge. This is graphically shown in Figure 4-3. 
The bridge forwards all broadcasts; therefore, an ARP request broadcasting the mes- 
sage “Who has this IP address?” is sent to all hosts on the LAN. The data packets as- 
sociated with ARP requests are small, but it requires computer time to process each 
request. Excessive amounts of broadcasts being forwarded by the bridge can lead to 
a broadcast storm, resulting in degraded network performance, called a network 
slowdown. 

The MAC address entries stored in a bridge table are temporary. Each MAC ad- 
dress entry to the bridge table remains active as long as there is periodic data traffic 
activity from that host on its port. However, an entry into the table is deleted if the 
port becomes inactive. In other words, the entries stored into the table have a limited 
lifetime. An expiration timer will commence once the MAC address is entered into 
the bridge table. The lifetime for the entry 1s renewed by new data traffic by the com- 
puter, and the MAC address is reentered. 


HHL 


o] [600000] [oo]] Hub 
Transparent 
Bridge 


o] [000000] [00]} Hub 


PC PC PE 


Data Traffic 
----- Broadcast Traffic 


FIGURE 4-3 An example of using a bridge to isolate data traffic. 


In a similar manner, all networking devices (for example, computers) contain 
an ARP cache, a temporary storage of MAC addresses recently contacted. This is 
also called the ARP table. The ARP cache holds the MAC address of a host, and this 


Interconnecting the LANs 


enables the message to be sent directly to the destination MAC address without the 
computer having to issue an ARP request for a MAC address. The ARP cache con- 
tents on a Windows computer can be viewed using the arp -a command while in the 
command prompt, as shown here: 


Windows Mac OS X 

C:\arp -a 

Interface: 10.10.20.2 on Interface x1000002 jmac:~mymac$ arp -a 
Internet Address Physical Address Type C1.salsa.org (192.168.12.1) at 
10.10.20.3 00-08-a3-a7-78-0c dynamic 00-08-a3-a7-78-0c on en1 
10.10.20.4 00-03-ba-04-ba-ef dynamic [ethernet] 


C3.salsa.org (192.168.12.1) at 
00-08-a3-a7-78-0c on en1 
[ethernet] 


The ARP cache contents on a Mac OS X computer can be viewed using the arp 
-a command while in the terminal mode. 
The following message is generated if all the ARP entries have expired: 


c:\arp -a 
No ARP Entries Found 


The name for the type of bridge used to interconnect two LANs running the same 
type of protocol (for example, Ethernet) is a transparent bridge. Bridges are also 
used to interconnect two LANs that are operating two different networking protocols. 
For example, LAN A could be an Ethernet LAN and LAN B could be a token ring. 
This type of bridge is called a translation bridge. An example is provided in Figure 
4-4. The bridge allows data from one LAN to be transferred to another. Also the MAC 
addressing information is standardized so the same address information is used re- 


gardless of the protocol. 
g 
Ai 
Token ring 


ma Jm 


Ethernet Token ring 









Translation 
Bridge 
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FIGURE 4-4 Using a translation bridge to interconnect an Ethernet and token-ring LAN. 


A common application today using a bridge is interconnecting LANs using 
wireless technology. The use of wireless bridges in LANs is a popular choice for 


Transparent Bridge 
Interconnects two LANs 
running the same type of 
protocol 


Translation Bridge 
Used to interconnect two 


LANs that are operating two 


different networking 
protocols 
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interconnecting the LANs when the cost of physically connecting them is prohibitive. 
Wireless technology and its LAN applications are presented in Chapter 11. 

The use of a bridge is not as common as it used to be except for wireless net- 
work applications. There are new networking technologies available that provide 
similar capabilities to the bridge but that are much more powerful. However, the 
bridge still 1s useful and has several advantages. Table 4-3 provides a summary of the 
advantages and disadvantages of a networking bridge. 


TABLE 4-3 Summary of the Advantages and Disadvantages of a 
Bridge for Interconnecting LANs 


Advantages Disadvantages 

Easy to install Works best in low-traffic areas 

Does an excellent job of isolating the data Forwards broadcasts and is susceptible 
traffic in two segments to broadcast storms 


Relatively inexpensive 

Can be used to interconnect two LANs with 
different protocols and hardware 

Reduces collision domains (remember how 
the CSMA/CD protocol works) 


4-4 THE NETWORK SWITCH 


The bridge provides a method for isolating the collision domains for interconnected 
LANs but lacks the capability to provide a direct data connection for the hosts. The 
bridge forwards the data traffic to all computers connected to its port. This was shown 
in Figure 4-3. The networking hub provides a technology for sharing access to the 
network with all computers connected to its ports in the LAN but lacks the capabil- 
ity to isolate the data traffic and provide a direct data connection from the source to 
the destination computer. The increase in the number of computers being used in 
LANs and the increased data traffic are making bridges and hubs of limited use in 
larger LANs. Basically, there is too much data traffic to be shared by the entire net- 
work. What is needed is a networking device that provides a direct data connection 
between communicating devices. Neither the bridge nor the hub provides a direct 
data connection for the hosts. A technology developed to improve the efficiency of 
the data networks and address the need for direct data connections is the layer 2 


switch. 
Layer 2 Switch The layer 2 switch is an improved network technology that addresses the issue 
An improved network of providing direct data connections, minimizing data collisions, and maximizing the 


technology that provides a use of a LAN’s bandwidth; in other words, that improves the efficiency of the data 
direct data connection for transfer in the network. The switch operates at layer 2 of the OSI model and therefore 
pe OUCReMIces tain uses the MAC or Ethernet address for making decisions for forwarding data packets. 
The switch monitors data traffic on its ports and collects MAC address information 
in the same way the bridge does to build a table of MAC addresses for the devices 
connected to its ports. The switch has multiple ports similar to the hub and can switch 
in a data connection from any port to any other port, similar to the bridge. This is why 
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the switch is sometimes called a multiport bridge. The switch minimizes traffic con- Multiport Bridge 
gestion and isolates data traffic in the LAN. An example of a switch being used ina Another name for a layer 2 
LAN is provided in Figure 4-5. switch 
Figure 4-5 shows a switch being used in the LAN to interconnect the hosts. In 
this figure, the hub has been replaced with a switch. The change from a hub to a 
switch is relatively easy. The port connections are the same (RJ-45), and once the con- 
nections are changed and the device is powered on, the switch begins to make the 
direct data connections for multiple ports using layer 2 switching. 










Printer 


a 
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FIGURE 4-5 A switch used to interconnect hosts in a LAN. 


The LAN shown in Figure 4-6 contains 14 computers and 2 printers connected Multicast 
to 16 ports on the switch, configured in a star topology. If the computer connected to Messages are sent to a 
port 1 is printing a file on the laser printer (port 12), the switch will set up a direct specific group of hosts on 
connection between ports 1 and 12. The computer at port 14 could also be communi- the network 
cating with the computer at port 7 and the computer at port 6 could be printing a file 
on the color printer at port 16. The use of the switch enables simultaneous direct data 
connections for multiple pairs of hosts connected to the network. Each switch con- 
nection provides a link with minimal collisions and therefore maximum use of the 
LAN’s bandwidth. A link with minimal collisions is possible since only the two com- 
puters that established the link will be communicating over the channel. Recall that 
in the star topology each host has a direct connection to the switch. Therefore, when 
the link is established between the two hosts, their link is isolated from any other data 
traffic. However, the exception to this is when broadcast or multicast messages are 
sent in the LAN. In the case of a broadcast message, the message 1s sent to all devices 
connected to the LAN. A multicast message is sent to a specific group of hosts on the 
network. 
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FIGURE 4-6 A switch used to interconnect the networking devices in a LAN. 





Switch 








Hub-Switch Comparison 


An experiment was set up to test the data handling characteristics of a hub and a 
switch given the same input instructions. The objective of this experiment was to 
show that data traffic 1s isolated with a switch but not with a hub. For this experiment, 
a LAN using a hub and a LAN using a switch were assembled. The LANs are shown 
in Figs. 4-7 (a) and (b). Each LAN contains four computers connected in a star topol- 
ogy. The computers are marked 1—4 for reference. The IP addresses are listed for each 
host. 

The Hub Experimental Results In this experiment, computer 1 pinged computer 
3. Computer 2 was used to capture the LAN data traffic using the Finisar Surveyor 
Demo protocol analyzer software. What are the expected results? Remember, a hub 
is a multiport repeater, and all data traffic input to the hub is passed on to all hosts 
connected to its ports. See the Ping Command Review box for a brief review of the 
use of the ping command. 
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FIGURE 4-7 (a) The LAN experiment with a HUB; (b) the LAN experiment with a switch. 


PING COMMAND REVIEW The ping command is used to verify that a network 
connection exists between two computers. The command format for ping is 


ping [ip address] {for this example ping 10.10.10.3} 


Once a link is established between the two computers, a series of echo requests and 
echo replies are issued by the networking devices to test the time it takes for data to 
pass through the link. The protocol used by the ping command is ICMP, the Internet 
Connection Message Protocol. 

The ping command is issued to an IP address; however, delivery of this com- 
mand to the computer designated by the IP address requires that a MAC address be 
identified for final delivery. The computer issuing the ping may not know the MAC 
address of the computer holding the identified IP address (no entry in the ARP cache 
table); therefore, an ARP request is issued. An ARP request is broadcast to all com- 
puters connected in the LAN. The computer that holds the IP address replies with its 
MAC address, and a direct line of communications is then established. 

The data traffic collected by computer 2 when computer | pinged computer 3 
is provided in Figure 4-8. The first line of the captured data shows the ARP request 
asking who has the IP address 10.10.10.3. The second line of the captured data shows 
the reply from 10.10.10.3 with the MAC address of 00-BO-D0-25-BF-48. The next 
eight lines in the captured data are the series of four echo requests and replies asso- 
ciated with a ping request. Even though computer 2 was not being pinged or replying 
to the ARP request, the data traffic was still present on computer 2’s hub port. The 
echo reply is from a Dell network interface card with the last six characters of the 
MAC address of 25-BF-48. The echo request is coming from a computer with 13-99- 
2E as the last six hex characters of its MAC address. 


Section 4-4 e THE NETWORK SWITCH 131 


S 0 


im Surveyor Demo - Detail View - [C:\Documents and Settings\Administrator Desktop\Network CDROM\Finisar\Hub Capture.cap - 10 MBPS 


z File Edit Configuration View Module Monitor Views Capture Views Tools Window Help 


TEELT EREE 
H, 








MM 4d > WMT Oo ® Z| Display Filter: | | 


| ooo Pt 731,724,280 | 4 BROADCAST 10,10.10.1 

0.731,846,920 64 10,10,10,1 10,10,10.3 ARP R HA=00B0D025BF48 
0.731.978.480 78 10.10.10.3 10,10,10,1 ICMP Echo Request 
0.732.124.880 78 10,10,10,1 10,10,10,3 ICMP Echo Reply 
1,730,103,400 78 10,10,10.3 10,10,10.1 ICMP Echo Request 
1.730.212.320 78 10,10,10,1 10,10,10,3 ICMP Echo Reply 
2.732.005.600 78 10.10.10.3 10,10,10,1 ICMP Echo Request 
2.732,.114,800 78 10,10,10,1 10,10,10,3 ICMP Echo Reply 
3,733,442 ,080 78 10,10,10,.3 10,10,10,1 ICMP Echo Request 

000009 3.733.548.240 78 10.10.10.1 10.10.10.33 ICMP Echo Reply 





- Detail View Frame ID 0, arrived at 02/27 16:17:20.731724, Frame Status: 
(Good Frame) 


a Data Link Control 

= (DLC) 
FFFFFFFFFFFF [BROADCAST] 
Source 0010A413992E [Xircom - 13992E] [Xircom 13992E] 
EthertType 0x0806 (Address Resolution Protocol CARP)) 





FIGURE 4-8 The captured data traffic by computer 2 for the LAN [Figure 4-7 (a)] 
using a hub. 


The Switch Experimental Results The same experiment was repeated for the 
LAN shown in Figure 4-7 (b), this time using a switch to interconnect the computers 
instead of a hub. This network consists of four computers connected in a star topol- 
ogy using a switch at the center of the network. The ping command was sent from 
computer 1 to computer 3, ping 10.10.10.3. The ARP cache for computer 1 is empty; 
therefore, the MAC address for computer 3 is not known by computer 1. An ARP re- 
quest is issued by computer 1, and computer 3 replies. The series of echo requests and 
echo replies follow; however, the data traffic captured by computer 2 (Figure 4-9), 
shows the ARP request asking who has the IP address 10.10.10.3. This is the last of 
the data communications between computers 1 and 3 seen by computer 2. A direct 
line of communication between computers 1 and 3 is established by the switch that 
prevents computer 2 from seeing the data traffic from computers 1 and 3. The only 
data traffic seen by computer 2 in this process was the broadcast of the ARP request. 
This is true for any other hosts in the LAN. The results of this experiment show that 
the use of the switch substantially reduces data traffic in the LAN, particularly un- 
necessary data traffic. The experiment shows that the broadcast associated with an 
ARP request is seen by all computers but not the ARP replies in a LAN using a 
switch. This is because a direct data connection is established between the two hosts. 
This experiment used pings and ARPs; however, this same advantage of using a 
switch is true when transferring files, image downloads, file printing, and so on. The 
data traffic is isolated from other computers on the LAN. Remember, the switch uses 
MAC addresses to establish what computers are connected to its ports. The switch 
then extracts the destination MAC address from the Ethernet data packets to deter- 
mine what port to switch the data to. 
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FIGURE 4-9 The data traffic captured by computer 2 for the LAN [Figure 4-7 (b)] using a 
switch. 


Managed Switches 


A managed switch is simply a network switch that allows the network administrator Managed Switch 
to monitor, configure, and manage certain network features such as what computers Allows the network 
are allowed to access the LAN via the switch. Access to the management features for administrator to monitor, 
the switch is password protected so that only the network administrators can gain en- configure, and manage select 
try. The following information describes some of the features of the managed inter- Network features 
face for a Cisco Catalyst 2900 series switch established using the Cisco Network ticco Network Assistant 
Assistant (CNA). This software can be downloaded from Cisco and provides an easy (CNA) 
way to manage the features of the Cisco switches. (Note: The download requires that A management software tool 
you have set-up a Cisco user account and password. The Cisco Network Assistant from Cisco that simplifies 
provides for a centralized mode for completing various network administration tasks switch configuration and 
for switches, routers, and wireless networking equipment.) troubleshooting. 

The start-up menu for a Cisco Catalyst 2960 switch obtained via the Cisco Net- 
work Assistant (CNA) is provided in Figure 4-10. The image is showing the current 
setup for the switch. The assigned IP address for the switch is 192.168.1.1, and a 
router and a switch are interconnected with the switch. The steps for setting the IP ad- 
dress for an interface on the switch are presented later in this section. 
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FIGURE 4-10 The start-up menu of a Cisco Catalyst switch using the Cisco Network 
Administrator software. 
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The current connections to the ports on the switch can be viewed by clicking 
the stacked switch icon at the top of the screen as shown in Figure 4-11. The image 
of the switch port connections shows ports 1, 2, and 3 are brighter, indicating that 
there are networking devices connected to the ports. The MAC addresses of the de- 
vices connected to the switch ports can be displayed by clicking the MAC address 
button under the Configure button as shown in Figure 4-12. There are four MAC ad- 
dresses assigned to port 1, one MAC address assigned to port 2, and one MAC ad- 
dress assigned to port 3. Multiple networking devices can be connected to a port if 
the devices are first connected to another switch or hub and the output of the switch 
or hub is connected to one switch port. An example showing four devices connected 
through a hub to port 1 on the switch is shown in Figure 4-13. The output interface 
information for the MAC Addresses table shows the following information in 
Figure 4-12: 


FastEthernet 0/1 
FastEthernet 0/2 
FastEthernet 0/3 


Notice that the Dynamic Address tab is highlighted. This indicates that this is a list- 
ing of the MAC addresses that have been assigned dynamically. Dynamic assign- 
ment means that the MAC address was assigned to a port when a host was connected. 
There is also a tab for Static Addresses. A static MAC address indicates that the MAC 
address has been manually assigned to an interface, and the port assignment does not 
expire. The Secure tab shows what switch ports have been secured. This means that 
a MAC address has been assigned to a port, and the port will automatically disable it- 
self if a device with a different MAC address connects to the secured port. 
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FIGURE 4-11 The highlighted ports showing the current connections and the location of 
the stacked switches icon. 


The FastEthernet 0/1, FastEthernet 0/2, FastEthernet 0/3 notation indicates the 
[Interface Type Slot#/Interface#] on the switch, and FastEthernet indicates that this 
interface supports 100 Mbps and 10 Mbps data rate connections. 

The “Aging Time” is listed to be 300 seconds. Aging time is the length of time 
a MAC address remains assigned to a port. The assignment of the MAC address will 
be removed if there is no data activity within this time. If the computer with the as- 
signed MAC address initiates new data activity, the aging time counter is restarted, 
and the MAC address remains assigned to the port. The management window shows 
a switch setting for enabling “Aging.” This switch is used to turn off the aging counter 
so that a MAC address assignment on a port never expires. 
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FIGURE 4-13 An example of a hub connected to a switch port, with four computers 
connected to the hub. 


The IP address on a switch interface can be configured using the Cisco Network 
Assistant software by clicking Configure—Device Properties—IP Addresses. This 
opens the IP Addresses menu shown in Figure 4-14. Click the area where the IP 
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address should be entered. This opens a text box for entering the IP address. Enter the 
IP address and click OK to save the IP address. 
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FIGURE 4-14 Configuring an IP address on an interface. 


The benefits of a using a network switch are many in a modern computer net- 
work. These benefits include less network congestion, faster data transfers, and ex- 
cellent manageability. It has been shown that a network switch can be used to replace 
the network hub, and the advantage is data traffic within a LAN is isolated. The term 
for this is isolating the collision domains, which is breaking the network into seg- 
ments. A segment is a portion of the network where the data traffic from one part of 
the network is isolated from the other networking devices. A direct benefit of isolat- 
ing collision domains is there will be an increase in the data transfer speed and 
throughput. This is due to the fact that the LAN bandwidth is not being shared, and 
chances of data collisions are minimized. As a result, the LAN will exhibit faster data 
transfers, and latency within the LAN will be significantly reduced. Reduced latency 
means that the data packets will arrive at the destination more quickly. 

Switches learn the MAC addresses of the connected networking by extracting 
the MAC address information from the headers of Ethernet data packet headers of 
transmitted data packets (refer back to Figure 1-6). The switch will map the extracted 
MAC address to the port where the data packet came in. This information is stored in 
Content Addressable Memory (CAM). CAM is a table of MAC address and port 
mapping used by the switch to identify connected networking devices. The extracted 
MAC addresses are then used by the switch to map a direct communication between 
two network devices connected to its ports. The MAC address and port information 
remain in CAM as long as the device connected to the switch port remains active. A 
time-stamp establishes the time when the mapping of the MAC address to a switch 
port is established. However, switches limit the amount of time address and port in- 
formation are stored in CAM. This is called aging time. The mapping information 
will be deleted from the switch’s CAM if there is no activity during this set time. This 
technique keeps the mapping information stored in CAM up to date. 
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What happens if the destination MAC address is not stored in CAM? In this 
case, the packet is transmitted out all switch ports except for the port where the packet 
was received. This is called flooding. 

It has been shown that switches minimize the collision domain due to the fact 
that a direct switch connection is made between networking devices. However, it is 
important to remember that switches do not reduce the broadcast domain. In a broad- 
cast domain, any network broadcast sent over the network will be seen by all net- 
working devices in the same network. Broadcasts within a LAN will be passed by 
switches. Refer back to the discussion of Figure 4-8 and 4-9 for an example. 

There are two modes used in a switch to forward frames. These are store-and- 
forward and cut-through. 


e Store-and-Forward: In this mode, the entire frame of data is received before 
any decision is made regarding forwarding the data packet to its destination. 
There is switch latency in this mode because the destination and source MAC 
addresses must be extracted from the packet, and the entire packet must be re- 
ceived before it is sent to the destination. The term switch latency is the length 
of time a data packet takes from the time it enters a switch until it exits. An ad- 
vantage of the store-and-forward mode is that the switch checks the data packet 
for errors before it is sent on to the destination. A disadvantage is lengthy data 
packets will take a longer time before they exit the switch and are sent to the 
destination. 

e Cut-Through: In this mode, the data packet is forwarded to the destination as 
soon as the destination MAC address has been read. This minimizes the switch 
latency; however, no error detection is provided by the switch. There are two 
forms of cut-through switching—Fast-Forward and Fragment Free. 

e Fast-Forward: This mode offers the minimum switch latency. The re- 
ceived data packet is sent to the destination as soon as the destination 
MAC address is extracted. 

e Fragment-Free: In this mode, fragment collisions are filtered out by the 
switch. Fragment-collisions are collisions that occur within the first 64 
bytes of the data packet. Recall from Chapter 1, Table 1-1 that the mini- 
mum Ethernet data packet size is 64 bytes. The collisions create packets 
smaller than 64 bytes, which are discarded. Latency is measured from the 
time the first bit is received until it is transmitted. 

e Adaptive Cut-Through: This is a combination of the store-and-forward mode 
and cut-through. The cut-through mode is used until an error threshold (errors 
in the data packets) has been exceeded. The switch mode changes from cut- 
through to store-and-forward after the error threshold has been exceeded. 


Multilayer Switches 


Newer switch technologies are available to help further improve the performance of 
computer networks. The term used to describe these switches is multilayer switches 
(MLS). An example is a layer 3 switch. Layer 3 switches still work at layer 2 but ad- 
ditionally work at the network layer (layer 3) of the OSI model and use IP address- 
ing for making decisions to route a data packet in the best direction. The major 
difference is that the packet switching in basic routers is handled by a programmed 
microprocessor. The layer 3 switch uses ASICs (application specific integrated cir- 
cuits) hardware to handle the packet switching. The advantage of using hardware to 
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handle the packet switching is a significant reduction in processing time (software 
versus hardware). In fact, the processing time of layer 3 switches can be as fast as the 
input data rate. This is called wire speed routing, where the data packets are 
processed as fast as they are arriving. Multilayer switches can also work at the upper 
layers of the OSI model. An example is a layer 4 switch that processes data packets 
at the transport layer of the OSI model. 


4-5 THE ROUTER 


The router is the most powerful networking device used today to interconnect LANs. 
The router is a layer 3 device in the OSI model, which means the router uses the net- 
work address (layer 3 addressing) to make routing decisions regarding forwarding 
data packets. Remember, the OSI model separates network responsibilities into dif- 
ferent layers. In the OSI model, the layer 3 or network layer responsibilities include 
handling of the network address. The network address 1s also called a logical address, 
rather than being a physical address such as the MAC address. The physical address 
is the hardware or MAC address embedded into the network interface card. The log- 
ical address describes the IP address location of the network and the address loca- 
tion of the host in the network. 

Essentially, the router is configured to know how to route data packets entering 
or exiting the LAN. This differs from the bridge and the layer 2 switch, which use the 
Ethernet address for making decisions regarding forwarding data packets and only 
know how to forward data to hosts physically connected to their ports. 

Routers are used to interconnect LANs in a campus network. Routers can be 
used to interconnect networks that use the same protocol (e.g., Ethernet), or they can 
be used to interconnect LANs that are using different layer 2 technologies such as an 
Ethernet and token ring. Routers also make it possible to interconnect to LANs 
around the country and the world and interconnect to many different networking 
protocols. 

Routers have multiple port connections for connecting to the LANs, and by de- 
finition a router must have a minimum of three ports. The common symbol used to 
represent a router in a networking drawing is provided in Figure 4-15. The arrows 
pointing in and out indicate that data enters and exits the routers through multiple 
ports. The router ports are bidirectional, meaning that data can enter and exit the same 
router port. Often the router ports are called the router interface, the physical con- 
nection where the router connects to the network. 


FIGURE 4-15 The network symbol for a router. 
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The Router Interface: Cisco 2800 Series 


Figure 4-16 shows the rear panel view (interface side) of a Cisco 2800 series router. 
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FIGURE 4-16 The rear panel view of a Cisco 2800 series router. 


The following describes the function of each interface. 


e USB Interface: The USB ports are used for storage and security support. 

e FastEthernet Ports: FEO/0: Fast Ethernet (10/100 Mbps) and FEO/1: Fast 
Ethernet (10/100 Mbps). 

e Console Input: This input provides an RS-232 serial communications link into 
the router for initial router configuration. A special cable, called a console ca- 
ble, is used to connect the console input to the serial port on a computer. The 
console cable can have RJ-45 plugs on each end and requires the use of an RJ- 
45 to DB9 adapter for connecting to the computer’s COM1 or COM2 serial 
port. The console cable can also have an RJ-45 connector on one end and an in- 
tegrated DB9 connector on the other end. 

e Auxiliary Input: This input is used to connect a dial-in modem into the router. 
The auxiliary port provides an alternate way to remotely log into the router if 
the network is down. This port also uses an RJ-45 connection. 

e Serial Interface: CTRLR T1 1 and CTRLR T1 0 
This is a serial connection and it has a built-in CSU/DSU. This interface is used 
to provide a T1 connection to the communications carrier. (Note: The 
CSU/DSU function is presented in Chapter 8.) This type of connection (RJ-45) 
replaces the older cabling using V.35 cable (shown later in Figure 4-19). There 
are three LEDs on this interface: 

e AL—alarm 
e LP—loop 
e CD—Carrier Detect 

e Voice Interface Card (VIC2-4FXQ): This interface shows four phone line 
connections. This router can be programmed as a small PBX (Private Branch 
Exchange) for use in a small office. The PBX function is presented in Chapter 8. 

e WAN Interface Card (WIC2AM): This interface has two RJ-11 jacks and has 
two V.90 analog internal modems. These modems can be used to handle both 
incoming and outgoing modem calls. This interface is listed as modem in 
Figure 4-16. 

e VIC-4FXS/DID: This interface is a four-port FXS and DID voice/fax interface 
card. FXS is a Foreign Exchange Interface that connects directly to a standard 
telephone. DID is Direct Inward Dialing and is a feature that enables callers to 
directly call an extension on a PBX. This interface is listed as FXS/DID in 
Figure 4-16. 
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The Router Interface—Cisco 2600 Series 


Figure 4-17 shows the rear panel view (interface side) of a Cisco 2600 series router. 
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FIGURE 4-17 The rear panel view of a Cisco 2600 series router. 


The following describes the function of each interface to the network: 


e Power On/Off: Turns on/off electrical power to the router. 

e Auxiliary Input: Used to connect a dial-in modem into the router. The auxil- 
lary port provides an alternate way to remotely log into the router if the net- 
work is down. This port also uses an RJ-45 connection. 

e Console Input: Provides an RS-232 serial communications link into the router 
for initial router configuration. A special cable, called a console cable, is used 
to connect the console input to the serial port on a computer. The console ca- 
ble uses RJ-45 plugs on each end and requires the use of an RJ-45 to DB9 
adapter for connecting to the COM1 or COM2 serial port. 

e Serial Ports: Provides a serial data communication link into and out of the 
router, using V.35 serial interface cables. 

e DSU Port: This T1 controller port connection is used to make the serial con- 
nection to Telco. This module has a built-in CSU/DSU module. There are five 
LEDs next to the RJ45 jack. These LEDs are for the following: 

TD—Transmit Data 


LP—Loop 
RD—Receive Data 
CD—Carrier Detect 
AL—Alarm 


e Ethernet Port: This connection provides a 10/100 Mbps Ethernet data link. 
e Analog Modem Ports: This router has a 16-port analog network module. 


The Router Interface—Cisco 2500 Series 


Figure 4-18 shows the rear panel view (interface side) of a Cisco 2500 series router. 
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FIGURE 4-18 The rear panel view of a Cisco 2500 series router. 


The following describes the function of each interface to the network. 


e Power On/Off: Turns on/off electrical power to the router. Power On/Off 
e Auxiliary Input: Used to connect a dial-in modem into the router. The auxil- Auxiliary Input 
iary port provides an alternate way to remotely log into the router if the network CO nsole Input 
is down. This port also uses an RJ-45 connection. Serial Ports 
e Console Input: Provides an RS-232 serial communications link into the router AUI Port 
for initial router configuration. A special cable, called a console cable, is used 
to connect the console input to the serial port on a computer. The console cable 
uses RJ-45 plugs on each end and requires the use of an RJ-45 to DB9 adapter 
for connecting to the COM1 or COM2 serial port. 
e Serial Ports: Provides a serial data communication link into and out of the 
router, using V.35 serial interface cables. An example of a V.35 cable is shown 
in Figure 4-19. 
e AUI Port: This is a 10 Mbps Ethernet port. AUI stands for “attachment unit 
interface.” 


A media converter is used to convert the 15-pin AUI port to the 8-pin RJ-45 con- Media Converter 
nector. An example of an AUI to RJ-45 media converter is shown in Figure 4-20. Me- Used to adapt a layer 1 
dia converters are commonly used in computer networks to adapt layer 1 or physical (physical layer) technology 
layer technologies from one technology to another. For example: to another layer 1 


technology 
AUI to twisted pair (RJ-45) AUI to fiber 
RJ-45 to fiber 





FIGURE 4-19 An example of a Cisco V.35 DTE cable (courtesy of StarTech.com). 
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FIGURE 4-20 A CentreCom™ 210TS AUI to RJ-45 media converter. 


Figure 4-21 shows a Cisco 7200 series router, which provides adaptable inter- 
faces for connecting to many physical layer technologies such as FastEthernet, giga- 
bit Ethernet, ATM, and FDDI. 
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FIGURE 4-21 A Cisco 7200 series router (courtesy of Cisco Systems). 
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4-6 INTERCONNECTING LANS WITH THE ROUTER 


The previous section introduced the function of a router in a network. A router routes Enterprise Network 
data based on the destination network address or logical address rather than the phys- Term used to describe the 
ical address used by layer 2 devices, such as the switch and the bridge. Information network used by a large 
exchanged with bridges and layer 2 switches requires that the MAC address for the C°MP@NY 
hosts be known. Routed networks such as most enterprise and campus networks use 
IP addressing for managing the data movement. Enterprise network is a term used 
to describe the network used by a large company. The use of the network or logical 
address on computers allows the information to be sent from a LAN to a destination 
without requiring that the computer know the MAC address of the destination com- 
puter. Remember, delivery of data packets is based on knowing the MAC address of 
the destination. 
An overview of the router interface was presented in section 4-5. The router in- 
terface provides a way to access the router for configuration either locally or re- 
motely. Interfaces are provided for making serial connections to the router and to 
other devices that require a serial communications link. For example, interfaces to 
wide area networking devices require a serial interface. RJ-45 ports are provided on 
the router interface for connecting the router to a LAN. Older routers can require the 
use of an AUI port to establish an Ethernet connection to a UTP cable. This port pro- 
vides a 10 Mbps data connection to Ethernet (10 Mbps) networks. The RJ-45 con- 
nection is used to connect both Ethernet (10 Mbps), FastEthernet (100 Mbps), 
Gigabit Ethernet (1000 Mbps), and 10 Gigabit Ethernet (10G) to a LAN. The RJ-45 
connection can also support gigabit and 10G Ethernet, but high-speed data networks 
can also use a fiber connection. 
This section introduces the information needed to design, manage, and config- FastEthernet Port 
ure campus networks. An example of a small interconnected LAN is provided in Fig-  (FA0/0, FA0/1, 
ure 4-22. This example shows four Ethernet LANs interconnected using three routers. FAQO/2,...) 
The LANs are configured in a star topology using switches at the center of the LAN. Naming of the FastEthernet 
The LANs are labeled LAN A, LAN B, LAN C, and LAN D. The routers are labeled ports on the router 
RouterA, RouterB, and RouterC (router naming protocols are discussed in Chapter 
6). Connection of the routers to the LANs is provided by the router’s FastEthernet 
port (FA0/0, FA0/1, FA0/2, . .. ). Look for the FA label in Figure 4-22. 
The interconnections for the routers and the LANs are summarized as follows: 


e RouterA connects directly to the LAN A switch via FastEthernet port FAO/0. 
RouterA also connects directly to RouterB via the FastEthernet port FAO/1 and 
connects to RouterC via FastEthernet port FA0/2. 

e RouterB connects directly to the LAN B switch via FastEthernet port FAO/0. 
RouterB connects to the LAN C switch via FastEthernet port FAO/1. RouterB 
connects directly to RouterA via FastEthernet port FA0/2 and connects to 
RouterC via FastEthernet port FA0/3. 

e RouterC connects directly to the LAN D switch via the FastEthernet port 
FA0/0. Connection to RouterB is provided via Ethernet port FAQ/1. RouterC 
connects to RouterA via FastEthernet port FAQ/2. 


The serial ports (S0/0, S0/1, S0/2, . . . ) are not being used to interconnect the routers Serial Port (S0/0, SO/1, 
in this example campus network. The serial interfaces are typically used to intercon- 50/2, .. .) 

nect LANs that connect through a data communications carrier such as a telephone Naming of the serial ports 
company (Telco). on the router 
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Router Port Addresses (LAN D 
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FIGURE 4-22 A small interconnected LAN. 


The network configuration provided in Figure 4-22 enables data packets to be 
sent and received from any host on the network once the routers in the network have 
been properly configured. For example, computer A1 in LAN A could be sending data 
to computer D1 in LAN D. This requires that the IP address for computer D1 is 
known by the user sending the data from computer A1. The data from computer A1 
will first travel to the switch where the data is passed to RouterA via the FA0/0 
FastEthernet data port. RouterA will examine the network address of the data packet 
and use configured routing instructions stored in routing tables to decide where to for- 
ward the data. RouterA determines that an available path to RouterC is via the FAQ/2 
FastEthernet port connection. The data is then sent directly to RouterC. RouterC de- 
termines that the data packet should be forwarded to the FAO/0 port to reach computer 
D1 in LAN D. The data is then sent to D1. Alternately, RouterA could have sent the 
data to RouterC through RouterB via Router A’s FAO/1 FastEthernet port. Path se- 
lection for data packets is examined in Chapter 7. 

Delivery of the information over the network was made possible by the use of 
an IP address and routing tables. Routing tables keep track of the routes used for for- 
warding data to its destination. RouterA used its routing table to determine a network 
data path so computer Al’s data could reach computer D1 in LAN D. RouterA de- 
termines that a path to the network where computer D1 is located can be obtained via 
RouterA’s FA0/2 FastEthernet port to the FAO/2 FastEthernet port on RouterC. 
RouterC determines that computer D1 is on LAN D, which connects to RouterC’s 
FAO/O FastEthernet port. An ARP request is issued by RouterC to determine the MAC 


Routing Table 

Keeps track of the routes to 
use for forwarding data to its 
destination 
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address of computer D1. The MAC address is then used for final delivery of the data 
to computer D1. 

If RouterA determines that the network path to RouterC is down, RouterA can 
route the data packet to RouterC through RouterB. After RouterB receives the data 
packet from RouterA, it uses its routing tables to determine where to forward the data 
packet. RouterB determines that the data needs to be sent to RouterC, and it uses the 
FAO/3 FastEthernet port to forward the data. 


Gateway Address 


The term gateway is used to describe the address of the networking device that en- Gateway 

ables the hosts in a LAN to connect to networks and hosts outside the LAN. For ex- Describes the networking 
ample, for all hosts in LAN A, the gateway address will be 10.10.10.250. This address device that enables hosts in 
is configured on the host computer. Any IP packets with a destination outside the 2 LAN to connect to 


LAN will be sent to the gateway address. is at pene Vest ent lae 
e 


Network Segments 


The network segment defines the networking link between two LANSs. There is a seg- 
ment associated with each connection of an internetworking device (e.g., router—hub, 
router—switch, router-router). For example, the IP address for the network segment 
connecting LAN A to the router is 10.10.20.0. All hosts connected to this segment 
must contain a 10.10.20.x because a subnet mask of 255.255.255.0 is being used. 
Subnet masking is fully explained in Chapter 5. 

Routers use the information about the network segments to determine where to 
forward data packets. For example, the network segments that connect to RouterA 
include 


10.10.20.0 
10.10.200.0 
10.10.100.0 


The computers in LAN A will have a 10.10.20.x address. All the computers in this 
network must contain a 10.10.20.x IP address. For example, computer Al in LAN A 
will have the assigned IP address of 10.10.20.1 and a gateway address of 
10.10.20.250. The computers in LAN B are located in the 10.10.10.0 network. This 
means that all the computers in this network must contain a 10.10.10.x IP address. 
The x part of the IP address is assigned for each host. The gateway address for the 
hosts in LAN B is 10.10.10.250. 


4-7 CONFIGURING THE NETWORK INTERFACE— 
AUTO-NEGOTIATION 


Most modern networking internetworking technologies (for example, hubs, switches, Auto-negotiation 
bridges, routers) now incorporate the auto-negotiation protocol. The protocol en- Protocol used by 

ables the Ethernet equipment to automate many of the installation steps. This includes interconnected electronic 
automatically configuring the operating speeds (e.g., 10/100/1000 Mbps) and the se- devices to negotiate a link 
lection of full or half duplex operation for the data link. The auto-negotiation proto- Speed 

col is defined in the IEEE Ethernet standard 802.3x for FastEthernet. 
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Fast Link Pulse (FLP) The auto-negotiation protocol uses a fast link pulse (FLP) to carry the infor- 


Carries the configuration mation between each end of a data link. A data link is shown in Figure 4-23. The data 
information between each rate for the fast link pulses is 10 Mbps, the same as for 10BaseT. The link pulses were 
end of a data link designed to operate over the limited bandwidth supported by CAT3 cabling. There- 


fore, even if a link is negotiated, there is no guarantee that the negotiated data rate will 
work over the link. Other tests on the cable link must be used to certify the cable can 
carry the negotiated data link configuration (see Chapter 2). 


Computer 


Link 
Partner 





Link 
Partner 


FIGURE 4-23 The two ends of a data link negotiating the operating parameters. 


Auto-Negotiation Steps 


Each link partner shares or advertises its data link capabilities with the other link part- 
ner. The two link partners then use the advertised capabilities to establish the fastest 
possible data link rate for both links. In the example of the link partners shown in Fig- 
ure 4-23, computer 1 advertises that its interface supports 10 Mbps. The switch ad- 
vertises that it supports both 10 and 100 Mbps. The network interfaces on each link 
partner are set for auto-negotiation; therefore, the 10 Mbps operating mode is se- 
lected. This is the fastest data rate that can be used in this data link. The data rate 1s 
limited by the 10 Mbps capabilities of the computer’s network interface. 

Note: Auto-negotiation is established when an Ethernet link is established. The 
link information is only sent one time, when the link is established. The negotiated link 
configuration will remain until the link 1s broken or the interfaces are reconfigured. 


Full Duplex/Half Duplex 


Half Duplex Modern network interfaces for computer networks have the capability of running the 

The communications device data over the links in either full or half duplex mode. As noted previously, full duplex 

can transmit or receive but means that the communications device can transmit and receive at the same time. 

not at the same time Half duplex means the communications device can transmit or receive but not at the 
same time. 


In full duplex operation (10/100 Mbps), the media must have separate transmit 
and receive data paths. This is provided for in CAT6/Se/5 cable with pairs 1—2 (trans- 
mit) and pairs 3—6 (receive). Full duplex with gigabit and 10 gigabit data rates require 
the use of all four wire pairs (1-2, 3—6, 4-5, 7-8). An important note is that the full 
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duplex mode in computer network links is only for point-to-point links. This means 
that there can only be two end stations on the link. The CSMA/CD protocol is turned 
off; therefore, there can’t be another networking device competing for use of the link. 
An example of networking devices that can run full duplex are computers connected 
to a switch. The switch can be configured to run the full duplex mode. This also re- 
quires that each end station on the link must be configurable to run full duplex mode. 

In half duplex operation, the link uses the CSMA/CD protocol. This means 
only one device talks at a time, and while the one device is talking, the other net- 
working devices “listen” to the network traffic. Examples of networks configured for 
full and half duplex mode are shown in Figure 4-24 (a) and (b). In full duplex opera- 
tion [Figure 4-24 (a)], CSMA/CD is turned off, and computers 1, 2, and the switch 
are transmitting and receiving at the same time. In half duplex mode [Figure 4-24 
(b)], CSMA/CD is turned on, computer | is transmitting, and computer 2 is “listen- 
ing” or receiving the data transmission. 





TR aretes Half-duplex mode 
RAS === (b) 


FIGURE 4-24 (a) Computer 1 transmits and receives at the same time; (b) computer 1 
transmits; others listen. 


An example of the port management features available with the Cisco switch 
using the Cisco Network Administrator software is provided in Figure 4-25 (a) and 
(b). The settings for the speed are shown in Figure 4-25 (a). An example of setting the 
switch for auto, half, and full-duplex are shown in Figure 4-25 (b). The auto setting 
is for auto-negotiate. 
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FIGURE 4-25 An example of the port management options available with a Cisco switch: 
(a) 100 Mbps auto-negotiation; (b) 10 Mbps half/full duplex option. 


Table 4-4 provides a summary of the advantages and disadvantages of the auto- 
negotiation protocol. 


TABLE 4-4 Summary of the Auto-negotiation Protocol 


Advantages Disadvantages 

Useful in LANs that have multiple Not recommended for fixed data links such as 
users with multiple connection the backbone in a network 

capabilities 

The auto-negotiation feature can A failed negotiation on a functioning link can 


maximize the data links’ throughput cause a link failure 
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SUMMARY 


This chapter has established how LANs are interconnected. The layers of the OSI 
model were presented. Examples of layer | (physical layer), layer 2 (data link layer) 
and layer 3 (network layer) were presented. The need for careful documentation was 
addressed in this chapter. The importance of this will become more relevant as the 
complexity in network topics increases from chapter to chapter. Internetworking 
hardware such as bridges, switches, and routers were discussed and examples of us- 
ing these technologies presented. 

A technique for internetworking the LANs using routers has been presented. In 
addition, the purpose of a router and its hardware interface has been defined. And the 
use of switches and hubs to connect to the routers has been demonstrated. The pur- 
pose of a gateway has been explained and demonstrated. The concept of a network 
segment has been examined. 

The concepts the student should understand from Chapter 4 are the following: 


e The layers of the OSI model and how a network administrator uses the layers 
to troubleshoot network problems 

e How bridges are used to interconnect separate LANs 

e How a switch is used in a network and why the switch improves network 
performance 

e Understand and be able to identify the various connections on a the router 
interface 

e How a router is used to interconnect LANs 

e The purpose of a gateway in a computer network 

e The concept of a network segment 

e The concept of auto-negotiation 


QUESTIONS AND PROBLEMS 


Section 4-2 


1. What are the seven layers of the OSI model? 

2. Which OSI layer is responsible for adding a header that includes routing 
information? 

3. Which OSI layer is considered the media access control layer? 

4. Which OSI layer combines messages or segments into packets? 

5. Which OSI layer is responsible for the mechanical connection to the network? 

6. The OSI layer responsible for data compression and encryption is which layer? 

J 

8 

9 





. TCP functions at what layer of the OSI model? 
. HTTP functions at what layer of the OSI model? 
. IP and IPX are examples of protocols that operate in what layer of the OSI 
model? 
10. The network interface card operates at what layer of the OSI model? 
11. Why are the layers of the OSI model important to the network administrator? 
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30. 
31. 
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Section 4-3 


12. 
13. 
14. 
15. 
16. 
17. 
18. 
19: 
20. 


What is a bridge? 

Define a segment. 

What information is stored in a bridge table? 

What is an association on a bridge, and how is it used? 

Excessive amounts of broadcasts on a network are called a . 

What command is used on a computer to view the contents of the ARP cache? 

An empty ARP cache indicates what? 

Why do entries into the bridging table have a limited lifetime? 

Which of the following are advantages of using a bridge to interconnect LANs? 
a. Works best in low traffic areas 

Relatively inexpensive 

Can be used to route data traffic 

Easy to install 

Reduces collision domains 


oe OS 
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The network switch operates at what layer of the OSI model? 
Another name for a switch is 
a. Multiport repeater 
b. Multiport bridge 
c. Multiport router 
d. Multiport hub 
How does a switch provide a link with minimal collisions? 
The link for a switch connection is isolated from other data traffic except for 
what type of messages? 
Explain what data traffic is sent across a network when a computer pings an- 
other computer. A hub is used to interconnect the computers. 
Explain what data traffic is seen by computer 3 when computer 1 pings com- 
puter 2 in a LAN. A switch is used to interconnect the computers. 
Explain the concept of dynamic assignment on a switch. 
Define aging time on a switch. 
Explain how a switch learns MAC addresses, and where does a switch store the 
address? 
What happens if a MAC address is not stored in CAM on a switch? 
What two modes are used by a switch to forward frames? 
What switch mode offers minimum latency? 
What is error threshold, and what mode is it associated with? 
Explain the difference in store-and-forward and the cut-through mode on a 
switch. 
How does a layer 3 switch differ from a layer 2 switch? 
What is meant by the term wire-speed routing? 


Section 4-5 


37: 
38. 


A router uses the network address on a data packet for what purpose? 
What is the logical address? 
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39. The physical connection where a router connects to the network is called the 
a. Router port 
b. Network port 
c. Network interface 
d. Router interface 
40. The connection to the router’s console input is typically which of the 
following? 
a. RS-232 
b. RJ-45 
c. DB9 
d. RJ-11 
41. AUI stands for 
a. Auxiliary Unit Input 
b. Attachment Unit Interconnect 
c. Auxiliary Unit Interface 
d. Attachment Unit Interface 
42. The AUI port on a router connects to what networking protocol? 
a. 100BaseT 
b. 10BaseT 
c. Token ring 
d. Ethernet 


Section 4-6 


43. Define enterprise network. 
44. The router interface most commonly used to interconnect LANs in a campus 
network is 
a. Serial 
b. Console port 
c. Ethernet 
d. ATM 
45. Serial interfaces on a router are typically used to 
a. Interconnect routers 
b. Interconnect hubs 
c. Connect to communication carriers 
d. Connect to auxiliary ports 
46. The designation EO indicates 
a. Ethernet port 0 
b. Ethernet input 
c. External port 0 
d. Exit port 0 
47. Routing tables on a router keep track of 
a. Port assignments 
b. MAC address assignments 
c. Gateway addresses of LANs 
d. Routes to use for forwarding data to its destination 





151 


48. The convention used for naming of the serial port 0 on a router is 
a. SO 
b. System 0 
c. Serial interface 0 
d. Serial AUI 0 
49. Define the term gateway. 


Section 4-7 


50. What is the purpose of the fast link pulse? 
51. Define full duplex. 
52. Define half duplex. 
53. Which of the following is a disadvantage of the auto-negotiation protocol? 
a. Only useful in LANs that have multiple connection capabilities 
b. A failed negotiation on a functioning link can cause a link failure 
c. Recommended for use in critical network data paths 
d. Works at 10 Mbps 


Critical Thinking 
54. Describe how a network administrator uses the OSI model to isolate a network 
problem. 
55. Why is auto-negotiation not recommended for use in critical network data 
paths? 
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5-1 Introduction 

5-2 The TCP/IP Layers 
5-3 Number Conversion 
5-4 IPv4 Addressing 
5-5 Subnet Masks 

5-6 CIDR Blocks 


OBJECTIVES 


e Develop an understanding of the four layers 
of the TCP/IP model 

e Define how a TCP connection is established, 
maintained, and terminated 

e Investigate the properties of the UDP connec- 
tionless protocol 

e Define the five classes of IPv4 addresses 

e Investigate the properties of basic number 


5-7 IPv6 Addressing 


5-8 Analyzing Computer Networks—FTP 
Data Packets 


Summary 


Questions and Problems 


Define the purpose of subnet masking 
Investigate the implementation of CIDR 
blocks and supernetting 

Apply subnet masking concepts to allocate 
space for hosts in a subnet 

Use a protocol analyzer to analyze TCP data 
packets 

Define the structure of IPv6 





protocol 

SYN, SYN ACK, ACK 
UDP 

Internet layer 

IP (Internet Protocol) 
ARP 


non-Internet routable IP 
addresses 


ARIN 
subnet mask 
classful 
supernetting 


conversion Analyze TCP data packets 
KEY TERMS 
NCP IGMP CIDR 
ARPAnet multicasting prefix length notation 
well-known ports multicast address CIDR block 
ICANN network interface layer supernets 
transport layer protocols hex IPv6 
TCP IPv4 IPng 
connection-oriented class A, B, C, D, and E full IPv6 address 


unicast address 
multicast address 
anycast address 
6to4 prefix 


FTP 
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5-1 INTRODUCTION 


Transmission Control Protocol/Internet Protocol (TCP/IP) is the protocol suite used 
for communications between hosts in most local networks and on the Internet. 
TCP/IP can be used to enable network communications in LANs, campus networks, 
and wide area networks as long as the hosts support the protocol. TCP/IP is widely 
supported and is included in operating systems such as Windows 9x, NT, 2K, XP, 
Vista, Mac OS, Linux, and Unix. 

TCP/IP was developed by the Defense Advanced Research Projects Agency 
(DARPA) to provide a way to network the computers of government researchers. The 
DARPA-funded initiative forced the use of a standard networking protocol by all de- 
fense contractors. 

NCP The transmission control protocol was first proposed in 1974 in a paper by Vint 

Network Control Protocol Cerf and Bob Kahn. The suite of protocols called TCP/IP was introduced in 1978. In 

ARPAnet 1983, TCP/IP replaced the network control protocol (NCP) as the standard network- 

Advanced Research Prous ing protocol used by the Advanced Research Projects Agency network (ARPAnet), 
J . , 

Agency network considered the predecessor to today’s Internet. 

This chapter examines the fundamentals of the TCP/IP protocol suite. The re- 
lationship of the TCP/IP model to the OSI model is presented in section 5-2. The lay- 
ers of the TCP/IP protocol are examined: the application layer, the transport layer, the 
Internet layer, and the network interface layer. Section 5-3 contains a discussion on 
numbering systems used in TCP/IP networks, including examples of converting dec- 
imal, hexadecimal, and binary numbers. The fundamentals of IP addressing are rein- 
troduced in section 5-4. (The concept of IP addressing was first introduced in Chapter 
1, “Introduction to Computer Networks.”) This section examines the 32-bit structure 
of IPv4 addressing, the current version used in the Internet. This section goes into de- 
tail about the role and features of IP addressing in computer networks. 

The concept of subnet masking is examined in section 5-5. This section pre- 
sents many examples of calculating and applying subnet masks to networks. The ma- 
terial presented provides the student with the knowledge base to master subnet 
masking-—related concepts that are presented later in the text. The fundamentals of 
CIDR blocks and supernetting are examined in section 5-6. An overview of the new 
IP addressing standard, IPv6, appears in section 5-7. The chapter concludes with 
examples of using the Surveyor Demo software to capture and analyze TCP/IP data 
traffic. 


5-2 THE TCP/IP LAYERS 


In this section we examine the four layers of the TCP/IP model: application, trans- 
port, Internet, and network interface. Each of these layers and their purpose are de- 
fined in Table 5-1. The TCP/IP protocol was established in 1978, prior to the final 
release of the OSI model (see Chapter 4); however, the four layers of the TCP/IP 
model do correlate with the seven layers of the OSI model, as shown in Figure 5-1. 
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TABLE 5-1 The Four Layers of the TCP/IP Model 


Layer Purpose of the Layer 

Application layer Defines the applications used to process requests and what 
ports and sockets are used 

Transport layer Defines the type of connection established between hosts and 
how acknowledgements are sent 

Internet layer Defines the protocols used for addressing and routing the 


data packets 
Network interface layer Defines how the host connects to the network 


TCP/IP 
OSI Model TCP/IP Model Protocol Suite 
Application Telnet, FTP, SMTP 
Presentation Application DNS, SNMP 
Session 
Transport Transport TCP, UDP 
Network Internet IP, ICMP, ARP 
Data Link Network Ethernet, ATM, Token 
Physical Interface Ring, Frame Relay 


FIGURE 5-1 The layers of the TCP/IP model and their relationship to the OSI model. 


The Application Layer 


The top level of the TCP/IP stack is the application layer. This layer is used to process 
requests from hosts and to make sure a connection is made to an appropriate port. A 
port is basically an address used to direct data to the proper destination application. 

There are 65,536 possible TCP ports. Ports 1 to 1023 are called well-known 
ports or reserved ports. These ports are reserved by ICANN (Internet Corporation 
for Assigned Names and Numbers). Ports 1024-49151 are called registered ports and 
are registered with ICANN. Ports 49152-65535 are called dynamic or private ports. 
Table 5-2 summarizes port numbers. 


TABLE 5-2 Port Number Assignments 


Port Numbers Description 

1 to 1023 The “well-known” ports 
1024 to 49,151 Registered ports 
49,152 to 65,535 Private ports 


Well-known Ports 
Ports reserved by ICANN 


ICANN 

Internet Corporation for 
Assigned Names and 
Numbers 
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Examples of well-known ports include HTTP (port 80), HTTPS (port 443), and 
SSH (port 22). Applications use these port numbers when communicating with an- 
other application. An example of this is shown in Figure 5-2. Host B is passing to Host 
A data that is destined for port 80 (HTTP). HTTP is the HyperText Transfer Proto- 
col, used for transferring nonsecure Web-based documents to a Web browser such as 
Netscape or Internet Explorer. Host A receives the packet and passes the application 
up to the port 80 application. Table 5-3 lists some popular applications and their port 
numbers for TCP/IP. This list includes FTP, SSH, SMTP, DNS, DHCP, HTTP, and 


HTTPS. 
TCP Connection 
ka ) HTTP(80) a 


FIGURE 5-2 An example of two hosts connected for a TCP transmission. 


TABLE 5-3 Common Applications and Their Port Numbers 


Port Number Application Description 
20, 21 FTP File Transfer Protocol 
22 SSH Secure Shell 
23 Telnet Virtual terminal connection 
25 SMTP Simple Mail Transfer Protocol 
53 DNS Domain name server 
67, 68 DHCP Dynamic Host Control Protocol 
(BOOTP-Client) 
(BOOTP-Server) 
69 TFTP Trivial File Transfer protocol 
80 HTTP Hypertext Transfer protocol 
110 POP3 Post Office Protocol 
161 SNMP Simple Network Management Protocol 
443 HTTPS Secure HTTP 
445 SMB Server message block 
1701 L2TP Layer 2 Tunneling Protocol 
Transport Layer 1720 H.323/Q.931 Voice over IP 
Protocols 1723 PPTP Point-to-point Tunneling Protocol 


Define the type of 
connection established 


between hosts and how numbers. 
acknowledgements are sent 
TCP The Transport Layer 


Transport Control Protocol 


You can find a complete list of ports at http://www.iana.org/assignments/port- 


Connection-Oriented 
Protocol 

Establishes a network 
connection, manages the 
delivery of data, and 
terminates the connection 


The transport layer protocols in TCP/IP are very important in establishing a net- 
work connection, managing the delivery of data between a source and destination 
host, and terminating the data connection. There are two transport protocols within 
the TCP/IP transport layer, TCP and UDP. TCP, the Transport Control Protocol, is a 
connection-oriented protocol, which means it establishes the network connection, 
manages the data transfer, and terminates the connection. The TCP protocol estab- 
lishes a set of rules or guidelines for establishing the connection. TCP verifies the 
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delivery of the data packets through the network and includes support for error check- 
ing and recovering lost data. TCP then specifies a procedure for terminating the net- 
work connection. 

A unique sequence of three data packets is exchanged at the beginning of a TCP 
connection between two hosts, as shown in Figure 5-3. This is a virtual connection 
that is made over the network. This sequence is as follows: 


1. The SYN (Synchronizing) packet 
2. The SYN ACK (Synchronizing Acknowledgement) packet 
3. The ACK (Acknowledgement) packet 


Host SYN Host 
Packet 1 
SEQ# = x LEN =0 B 


SYN 
SYN ACK 
ACK 


Host SYN + ACK Host 
Packet 2 
A SEQ#=y ACK#=x+1 B 


D E L 


Host ACK Host 
Packet 3 
A SEQ#=x+1 ACK#=y+1 B 


FIGURE 5-3 The three-packet initial TCP handshake. 


The host initiating the connection will send a synchronizing packet (SYN) (see 
Figure 5-3). In this example, Host A issues a SYN packet to initiate the TCP hand- 
shake. The SYN will have a sequence number (SEQ) associated with it. In the ex- 
ample shown in Figure 5-3, the sequence number is x. The sequence number is used 
to keep track of the data packets being transferred from Host A to Host B. The length 
of the packet being sent by Host A is 0 (LEN 0), which indicates that the packet con- 
tains no data. 

In packet 2, Host B replies with aS YN ACK packet. The ACK is an acknowl- 
edgement that Host B received the packet from Host A. There is a number attached 
to the ACK with a value of (x + 1) that should be the sum of the SEQ# from packet 1 
plus the length (LEN) of packet 1. Recall that the length of packet 1 is O (LEN 0), but 
packet 1 counts as one packet; therefore, Host B replies with an acknowledgement of 
packet 1 sequence number plus 1 (x + 1). This acknowledgement notifies Host A that 
the packet (packet 1) was received. Packet 2 from Host B will also have a sequence 
number issued by Host B. In this packet, the sequence number has a value of y. This 
sequence number is used to keep track of packets transferred by Host B. 

In packet 3, Host A acknowledges the reception of Host B’s packet. The ACK 
number is an increment of one higher than the SEQ# sent by Host B in packet 2 (y + 
1). Host A also sends an updated SEQ# that is one larger than the SEQ# Host A sent 
in packet 1 (x + 1). Remember, Host A and Host B each have their own sequence num- 
bers. This completes the three-packet handshake that establishes the TCP connection. 
This handshake appears at the beginning of all TCP data transfers. 

The following is an example of a TCP packet transmission captured using the 
Surveyor Demo protocol analyzer software provided on the text’s companion 
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CD-ROM. The network setup is shown in Figure 5-4. Host A (the client) 1s estab- 
lishing an FTP connection with Host B. The captured file is 5-a.cap and is also pro- 
vided on the CD-ROM in the Capture folder. Portions of the captured data packets 


are shown in Figure 5-5. 
Host Host 
A B 


Client FTP server 





FIGURE 5-4 The setup for the capture of the TCP connection. 








ID Summary 

000001 TCP SP=1054 DP=21 SYN SEQ=997462768 ACK=0 LEN=0 WS=16384 OPT 
000002 TCP SP=21 DP=1054 SYN SEQ=3909625466 ACK=997462769 LEN=0 WS=17520 
000003 TCP SP=1054 DP=21 SEQ=997462769 ACK=3909625467 LEN=0 WS=17520 
000004 FTP R Port=1054 220 w2kserver Microsoft 


000009 FTP C Port=1054 USER administrator 
000010 FTP R Port=1054 331 Password required 


000014 FTP C Port=1054 PASS Chile 


FIGURE 5-5 An example of the three packets exchanged in the initial TCP handshake. 


Packet 1 (ID 000001) is the SYN or synchronizing packet. This packet is sent 
from the host computer on the network that wants to establish a TCP network con- 
nection. In this example, Host A is making a TCP connection for an FTP file transfer. 
The summary information for packet 1 specifies that this is a TCP packet, the source 
port is 1054 (SP=1054), and the destination port is 21 (DP=21). Port 1054 is an arbi- 
trary port number that the FTP client picks or is assigned by the operating system. 
The destination port 21 is the well-known FTP port (see Table 5-3). The packet has a 
starting sequence number, 997462768, and there is no acknowledgement (ACK=0). 
The length of the data packet is 0 (LEN=0). This indicates that the packet does not 
contain any data. The window size = 16384 (WS=16384). The window size indicates 
how many data packets can be transferred without an acknowledgement. 

Packet 2 1s the SYN-ACK packet from the FTP server. The sequence number 
SEQ=3909625466 is the start of a new sequence for the data packet transfers from 
Host B. The source port is 21 (SP=21) and the destination port for packet 2 is 1054 
(DP=1054). ACK=997462769 is an acknowledge by host B (the FTP server) that the 
first TCP transmission was received. Note that this acknowledgement shows an in- 
crement of 1 from the starting sequence number provided by host A in packet 1. 

Packet 3 is an acknowledgement from the client (host A) back to the FTP server 
(host B) that packet 2 was received. Note that the acknowledgement is 
ACK=3909625467, which is an increment of 1 from the SEQ number transmitted in 
packet 2. This completes the initial handshake establishing the TCP connection. The 
next part is the data packet transfer. At this point, the two hosts can begin transferring 
data packets. 

The last part of the TCP connection is terminating the session for each host. The 
first thing that happens is a host sends a FIN (finish) packet to the other connected 
host. This is shown in Figure 5-6. Host B sends a FIN packet to Host A indicating the 
data transmission is complete. Host A responds with an ACK packet acknowledging 
the reception of the FIN packet. Host A then sends Host B a FIN packet indicating 
that the connection is being terminated. Host B replies with an ACK packet. 
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Host FIN SEQ# ACK# Host 
A B 
Host SEQ# ACK# Host 
A B 
Host FIN SEQ# ACK# Host 
A B 
Host SEQ# ACK# Host 
A B 


FIGURE 5-6 Terminating the TCP 


Figure 5-7 shows an example of terminating a TCP connection. This example 
was captured with the Surveyor Demo protocol analyzer software. The captured file 
is 5-a.cap and it is provided on the companion CD-ROM in the Finisar folder. 






000048 TCP SP=21 DP=1054 FIN SEQ=3909625742 ACK=997462851 LEN=0 WS=17 

000049 TCP SP=1054 DP=21 SEQ=997 462851 ACK=3909625743 LEN=0 WS=17245 
000050 TCP SP=1054 DP=21 FIN SEQ=997462851 ACK=3909625743 LEN=0 WS=17245 
000051 TCP SP=21 DP=1054 SEQ=3 909625743 ACK=997 462852 LEN=0 WS=17438 


FIGURE 5-7 An example of the four-packet TCP connection termination. 


Packet 48 (see Figure 5-7) is a TCP packet with a source port of 21 (SP=21) 
and a destination port of 1054 (DP=1054). The FIN statement is shown, followed by 
a SEQ# and an ACK#. Remember, the SEQ and ACK numbers are used to keep track 
of the number of packets transmitted and an acknowledgement of the number re- 
ceived. The LEN of packet 48 is 0, which means the packet does not contain any data. 
Packet 49 is an acknowledgement from the host, at port 1054, of the FIN packet. Re- 
member, the FIN packet was sent by the host at the source port 21. In packet 50 the 
host at port 1054 sends a FIN packet to the host at the destination port 21. In packet 
51, the host at port 21 acknowledges the reception of the FIN packet and the four- 
packet sequence closes the TCP connection. 

UDP, the User Datagram Protocol, is a connectionless protocol. This means 
UDP packets are transported over the network without a connection being established 
and without any acknowledgement that the data packets arrived at the destination. 
UDP is useful in applications such as videoconferencing and audio feeds, where such 
acknowledgements are not necessary. 

Figure 5-8 provides an example of a UDP packet transfer. Packet 136 is the start 
of a UDP packet transfer of an Internet audio feed. A TCP connection to the Internet 
was made first, and then the feed was started. At that time, the UDP connectionless 
packets started. Packets 138, 139, and 140 are the same types of packets with a length 
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Internet Layer 

Defines the protocols used 
for addressing and routing 
data packets 


IP (Internet Protocol) 
Defines the addressing used 
to identify the source and 
destination addresses of data 
packets being delivered over 
an IP network 


ARP 

Address Resolution Protocol, 
used to map an IP address to 
its MAC address 


of 789. No acknowledgements are sent back from the client. All the packets are com- 
ing from the Internet source. UDP does not have a procedure for terminating the data 
transfer; the source either stops delivery of the data packets or the client terminates 
the connection. 





E Surveyor Demo Capture View - D:\Chapter5\UDP capture.cap - 100 MBPS - (Total 278. Display 25 )) - Fram = 


oll JABA K|4 |O @| = bw BM ee ce 3 33 8 oS C, 


| Io | Status | Elapsed [sec] Size | Destination | Source Summary 
000136 6.199.544.800 827 Dell 25BF48 Xircom 13992E UDP SP=3737 DP=1164 LEN=789 
000138 4 18.400 827 Dell 25BF48 Mircom 13992E UDP SP=3737 DP=1164 LEN=789 
000138 5.779.560.000 827 Dell 25BF48 Xircom 13992E UDP SP=3737 DP=1164 LEN=789 
000141 .800 827 Dell 25BF48 Xircom 13992E UDP SP=3737 DP=1164 LEN=789 


FIGURE 5-8 An example of a UDP packet transfer. 


The Internet Layer 


The TCP/IP Internet layer defines the protocols used for addressing and routing the 
data packets. Protocols that are part of the TCP/IP Internet layer include IP, ARP, 
ICMP, and IGMP. We examine these protocols next. 


IP The IP (Internet Protocol) defines the addressing used to identify the source 
and destination addresses of data packets being delivered over an IP network. The IP 
address is a logical address that consists of a network and a host address portion. The 
network portion is used to direct the data to the proper network. The host address 
identifies the address locally assigned to the host. The network portion of the address 
is similar to the area code for a telephone number. The host address is similar to the 
local exchange number. The network and host portions of the IP address are then used 
to route the data packets to the destination. (IP addressing and subnet masking are ex- 
amined in detail in sections 5-4 and 5-5.) 


ARP ARP, the Address Resolution Protocol, is used to resolve an IP address to a 
hardware address for final delivery of data packets to the destination. ARP issues a 
query in a network called an ARP request, asking which network interface has this IP 
address. The host assigned the IP address replies with an ARP reply, the protocol that 
contains the hardware address for the destination host. An example of an ARP request 
captured with the Surveyor Demo Protocol Analyzer software is provided in Figure 
5-9. As shown highlighted in Figure 5-9 (a), an ARP request is issued on the LAN. 
The source MAC address of the packet is 00-10-A4-13-99-2E. The destination ad- 
dress on the local area network shown is BROADCAST, which means this message 
is being sent to all computers in the local area network. A query (Q) is being asked 
who has the IP address 10.10.10.1 (PA=). PA is an abbreviation for protocol address. 

The highlighted area in Figure 5-9 (b) shows the destination computer’s ARP 
reply, sending its MAC address back to the source that issued the ARP request. (The 
R after the ARP indicates this is an ARP reply.) The source of the ARP reply is 00- 
10A4-13-6C-6E, which is replying that the MAC address for 10.10.10.1 is 00-10-A4- 
13-6C-6E (HA=). HA is an abbreviation for Hardware Address. In this case, the 
owner of the IP address replied to the message, but this is not always the case. Some- 
times another networking device, such as a router, can provide the MAC address in- 
formation. In that case, the MAC address being returned is for the next networking 
device in the route to the destination. 
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| ID | Status | Elapsed [sec] si ze | Destination | Source | 

ooooo0o 25.462.226.320 64 BROADCAST O010A413992E ARP Q PA=10.10.10.1 
000001 25.462.769. 400 64 0010A413992E 0010A4136C6E ARP R HA=0010A4136C6E 





(a) 
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| Io | Status | Elapsed [sec] size | Destination | Source | 
000000 25. 462.226.320 64 BROADCAST OO010A413992E ARP Q PA=10.10.10.1 
| ooooo1 25.462.769.400 64 0010A413992E OO10A4136C6E ARP R HA=0010A4136C6E 
(b) 


FIGURE 5-9 (a) The captured packets showing the ARP request; (b) the ARP reply. 


A breakdown of the packet details of the ARP request is provided in Figure 
5-10. The description of the ARP request is a broadcast that is the uppercase F. This 
means that all binary data bits are set to a logical 1. The data packet with all Fs is 
highlighted at the bottom of the image. Can you find the source address for the ARP 
request? The source address of 00-10-A4-13-99-2E immediately follows the desti- 
nation address. The four hexadecimal characters (Ox0806) identify this as an ARP 
packet. The Ox indicates that the 0806 is a hexadecimal number. We discuss hexa- 
decimal numbers in section 5-3. 





ILC 


FFFFFFFFFFFF BROADCAST 
0010A413992E [No vendor Name. - 13992E] [0010A413992E] 
oxoso6 (Address Resolution Protocol (ARP)) 


(Ethernet) 


(Request) 
0010A413992E [No vendor Name. - 13992E] [0010A413992E] 
10.10.10.4 
ooo000000000 [No Vendor Name. - 000000] [000000000000] 
10.10.10.11 


Aao 10 A4 13 99 2E 08 06 00 01 
08 00 06 04 OO 01 00 10 A4 13 99 2E OA DA OA 04 
00 00 00 00 00 00 OA OA OA 01 00 OO OO OO 00 OO 
00 00 00 00 00 00 00 OO O00 00 00 OO BA AS SF FO 





FIGURE 5-10 The details of the ARP broadcast packet. 


ICMP The Internet Control Message Protocol (ICMP) is used to control the flow of 
data in the network, for reporting errors, and for performing diagnostics. A network- 
ing device, such as a router, sends an ICMP source-quench packet to a host that re- 
quests a slowdown in the data transfer. 
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A very important troubleshooting tool within the ICMP protocol is ping, the 
packet Internet groper. The ping command is used to verify connectivity with another 
host in the network. The destination host could be in a LAN, a campus LAN, or on 
the Internet. 

The ping command was introduced in Chapter 1 and used in Chapter 4 to test 
the data packet deliveries in a LAN using a hub or switch. The ping command uses a 
series of echo requests, and the networking device receiving the echo requests re- 
sponds with a series of echo replies to test a network connection. Refer to Chapters 1 
and 4 for examples. 


IGMP IGMP IGMP is the Internet Group Message Protocol. It is used when one host 
Internet Group Message needs to send data to many destination hosts. This is called multicasting. The ad- 
Protocol dresses used to send a multicast data packet are called multicast addresses and are 


reserved addresses not assigned to hosts in a network. An example of an application 
that uses IGMP packets is when a router uses multicasting to share routing tables. 
This is explained in Chapter 7, when routing protocols are examined. 

Another application of IGMP packets is when a host wants to stream data to 


Multicasting 
When one host sends data to 
many destination hosts 


Multicast Addresses multiple hosts. Streaming means the data is sent without waiting for any acknowl- 
The addresses used to senda edgement that the data packets were delivered. In fact, in the IGMP protocol, the 
multicast data packet source doesn’t care whether the destination receives a packet. Streaming is an im- 


portant application in the transfer of audio and video files over the Internet. Another 
feature of IGMP 1s that the data is handed off to the application layer as it arrives. This 
enables the appropriate application to begin processing the data for playback. 


The Network Interface Layer 


Network Interface Layer The network interface layer of the TCP/IP model defines how the host connects to 

Defines how the host the network. Recall that the host can be a computer or a networking device such as a 

connects to the network router. The type of network to which the host connects is not dictated by the TCP/IP 
protocol. The host could be a computer connected to an Ethernet or token-ring net- 
work or a router connected to a frame relay wide area network. TCP/IP is not depen- 
dent on a specific networking technology; therefore, TCP/IP can be adapted to run on 
newer networking technologies such as ATM (asynchronous transfer mode). 

In the network interface layer every TCP/IP data packet must have a destina- 
tion and a source MAC address in the TCP/IP header. The MAC or hardware address 
is found on the host’s network interface card or connection, and it is 12 hexadecimal 
characters in length. For example, the network interface could have a MAC address of 


OO-10-A4-13-99-2E 


The hardware address is used for final delivery of data packets to the next des- 
tination in a network. The first six hexadecimal numbers represent the organization 
that manufactured the card. This is called the OUI (organizational unit identifier). The 
last six digits are unique numbers assigned by the manufacturer of the network inter- 
face. The concept of the MAC address was fully explained in Chapter 1 and you are 
encouraged to refer to this material for a thorough review. 
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5-3 NUMBER CONVERSION 


This section reviews the numbering systems used in computer networking, with a fo- 
cus on converting binary, decimal, and hexadecimal numbers. 


Binary-Decimal Conversion 


Binary numbers are represented as a logical O or logical 1 in base 2 format. This 
means that each number has a place value of 2”, where n is the place value position 
of the binary digit. The place values start at 2° with the least significant bit (LSB) po- 
sition. For example, the binary number 1 0 1 1 has the place values of 2° for the LSB 
position to 2? for the most significant bit (MSB) position. 


Place value oe 2 2 pis 
Binary digit l 0 l l 
MSB->LSB MSB LSB 


The 1 and 0 are used as a multiplier times the place value. For example, the con- 
version of 1 O 1 1 to decimal is as follows: 


1x2 =8 
0x2?=0 
1x2!=2 
1x2°=1 
sum = 11 


Note that the place value was multiplied by the value of the binary digit. 

Instead of writing 2° 2! 2°... ., itis easier to write the decimal equivalent for 
each place value (for example, 1, 2, 4, 8, 16, 32, 64, 128). The calculations for deter- 
mining each place value are as follows: 

2° =] 2'=2 2? =4 2=8 

2*= 16 2° = 32 2° = 64 27 = 128 


This is shown in Table 5-4. 


TABLE 5-4 Place Values for Eight Binary Numbers (an Octet) 
Place value (decimal) 128 64 32 16 8 4 2 1 
Place value 2’ 2° 2 = 2° 2 2 2° 
MSB—LSB MSB LSB 


For example, the place values for the binary number | 0 0 1 0 0 can be set up 


as follows: 
Place value (decimal) 32 16 8 4 2 1 
Place value 2 2 2 2 2 2” 
Binary digit l 0 0 l 0 0 
MSB—LSB MSB LSB 
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Every place value that has a binary digit of 1 is used to sum a total for deter- 
mining the decimal equivalent for the binary number. In this example, the decimal 
equivalent is 32 + 4 = 36. After working a few examples it becomes obvious that the 
base 2 place values can be written by inspection in their decimal equivalence. The 
rightmost place value is 1, the next place value is 2, the next is 4, and so on. 

The 8-bit octet numbers used in IP addressing are converted from binary to dec- 
imal in the same manner. The following example demonstrates this. 


| 
Example 5-1 


Given a 32-bit IP address number expressed in binary format, convert the number to 
a dotted-decimal format. 


11000000 10101000 00100000 00001100 


octet-4 octet-3 octet-2 octet- 1 


Solution: 


First, assign the place value for each binary position. 
128 64 32 16 8 4 2 
octet- 1 0 0 0 0 1 1 0 0 
(1x8)+0 x4)=8+4=12 


128 64 32 16 8 4 2 
octet-2 0 0 1 0 0 0 0 0 
(1 x 32) = 32 
128 64 a2 16 8 4 2 1 
octet-3 1 0 1 0 1 0 0 0 


(1 x 128) + (1 x 32) (1 x 8) = 128 + 32 + 8 = 168 


128 64 32 16 8 4 2 
octet-4 1 1 0 0 0 0 0 0 
(1 x 128) + (1 x 64) = 128 + 64 = 192 


Therefore, the dotted decimal equivalent is 192.168.32.12. 


Decimal— Binary Conversion 


The simplest way to convert a decimal number to binary is using division, repeatedly 
dividing the decimal number by 2 until the quotient is 0. The division steps for con- 
verting decimal numbers to binary are as follows: 


1. Divide the decimal number by 2, record the remainder of O or 1, and write the 
quotient or result of the division by 2. 
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2. Divide the quotient by 2 and record the remainder of 0 or |. Write the quotient 


and repeat this step until the quotient is 0. 


3. Write the remainder numbers (0 and 1) in reverse order to obtain the binary 


equivalent value. 


| 
Example 5-2 


Convert the decimal number 12 to binary. 


Solution: 


Divide 12 by 2. This equals 6 with a remainder of 0. Divide 6 by 2. This equals 3 
with a remainder of 0. Divide 3 by 2. This equals 1 with a remainder of 1. Divide 1 
by 2. This equals 0 with a remainder of 1. The quotient is 0; therefore, the conver- 
sion is done. Write the remainder numbers in reverse order to generate the binary 
equivalent value. This yields a value of 1 1 0 0. The calculation for this is shown: 


You can verify the answer by converting the binary number back to decimal. 


Ala 

26 0 

213 0 

211 1 

0 1 
8 d 2 
1 1 0 


(1x8)+(x4)=12 


| 
Example 5-3 


Convert 33 to its binary equivalent. 


Solution: 


Use the decimal-to-binary steps listed previously. 


2133 
2116 
218 
214 
22) 
211 
0 
The answer is 10000 1. 
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Example 5-4 


Convert the decimal number 254 to binary. 


Solution 


Use the decimal-to-binary steps listed previously. 
21254 


The answeris 11111110. 


Hexadecimal Numbers 


Hex Hexadecimal numbers (hex) are base 16 numbers. A conversion lookup table for 
Hexadecimal, base 16 hexadecimal is provided in Table 5-5. It takes four binary numbers to represent a 
hexadecimal number. Notice that the letters A to F are used to represent the decimal 
numbers 10 to 15. 
Converting Hexadecimal The simplest way to convert hexadecimal numbers to 
binary is through the use of either a calculator or a lookup table such as Table 5-5. 
TABLE 5-5 Hexadecimal Conversion Table 
Decimal Hexadecimal Binary 
0 0 0000 
1 1 0001 
2 2 0010 
3 3 0011 
4 4 0100 
5 5 0101 
6 6 0110 
7 7 0111 
8 8 1000 
9 9 1001 
10 A 1010 
11 B 1011 
12 C 1100 
13 D 1101 
14 E 1110 
15 F 1111 
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Hexadecimal numbers are used in computer networks to represent the com- 
puter’s 12-hex character MAC address and are used to display the packet details in a 
protocol analyzer, as shown in Figure 5-11. Hex numbers are also used in [Pv6 ad- 
dressing (discussed in section 5-7). 


Detail View -- Frame ID 42, arrived at 05/05 15:24:07.900035 
Data Link Control (DLC) 





Destination O100SEQ00000A No Vendor Name. - 00000A O100SE00000A 
Source 00107B80E600 [No Vendor Name. - SO0E60D] [00107B80E60D] 
EtherType oxosoo (Internet Protocol (IP)) 


Internet Protocol CIP) 
Version/Header Length |0~45 








0100 .... Version 4 
. 0101 20 bytes - Header Length 
Type of Service oxco 
Ts ears Internetwork Control 


joel -‘emaie Normal Delay 
sosse Deae Normal Throughput 










01 00 SE OO foo OA ff 45 co BPE... {.%...EA 
00 3c 00 OO 00 00 02 58 CB 9C OA DA 01 FA EO OO eGeeeae ME... Ua. 
00 OA 02 OS EE D1 00 OO 00 00 00 00 00 oo OO 00 aa ee 5 Nesseaceneae 
00 00 00 00 00 01 00 01 00 oc 01 00 i pO DO OD 6||lClCUkdewasawaewacures 
00 OF 00 04 OO 08 OC 00 01 00 53 DF 9D SC | assssssŘ.Ò.à so... 


FIGURE 5-11 An example of the use of hex numbers in data packets. 


The highlighted region in Figure 5-11 shows the destination MAC address of 
01005E00000A, which is a 12-digit hexadecimal code. Notice that the EtherType 
number is Ox0800, defining that this an Internet protocol packet. Also note that the 
numbers at the bottom of the screen are expressed in hex format. These numbers are 
the values in the data packets. 


Qx800—The Ox indicates this is a hexadecimal number. 


Ox800,;—The subscript H is sometimes used to indicate that this is a hexadec- 
imal number. The subscript notation is not always practical to display in a text 
format, so this style is of limited use. 


The following are examples of converting hexadecimal numbers to binary. 


Example 5-5 

Convert the hexadecimal number Ox48AF to binary. 
Solution: 

Use Table 5-5 to convert the hex numbers. 


Hex: 4 8 A F 
Binary: 0100 1000 1010 1111 
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| 
Example 5-6 


Convert the hexadecimal number 0x0800 to binary. 


Solution: 


Use Table 5-5 to convert the hex numbers. 


Hex: 0 8 0 0 
Binary: 0000 1000 0000 0000 


Converting binary numbers to hexadecimal requires that the binary numbers be sep- 
arated into groups of four beginning with the LSB position. If the binary sequence 
doesn’t have 4 bits use leading Os to pad the number. The binary numbers used in 
computer networks are always a multiple of four in length; therefore, you won’t 
have to pad any of the numbers with leading Os. 


| 
Example 5-7 


Convert the binary number 0 1001100101 0 to hexadecimal. 


Solution: 


Separate the binary numbers into groups of four beginning with the LSB position. 
Next use the conversion lookup table (Table 5-5) to convert each 4-bit binary group 
to hexadecimal. 


0100 1100 1010 
4 C A 


The answer is Ox4CA. 


5-4 IPV4 ADDRESSING 


IP addressing provides a standardized format for assigning a unique routable address 
for every host in a TCP/IP network. You may ask, “The host in a TCP/IP network al- 
ready has a hardware (MAC) address, so why the need for the IP address?” 
The answer is that internetworking devices need a routable network address to 
deliver data packets outside the LAN. The IP address is similar to a telephone num- 
ber. The network portion of the IP address is similar to the telephone’s area code. The 
host portion of the IP address is similar to the telephone’s 7-bit local exchange num- 
ber. This section identifies the network and host portion of an IP address and de- 
scribes how IP addressing is used to identify the address for a host in a network. 
IPv4 The IP addressing version currently being used on the Internet and for TCP/IP 
The IP version currently data traffic is IPv4. There are five classes of IPv4 addresses: class A, B, C, D, and E. 
being used on the Internet The address breakdown for each class is provided in Table 5-6. Classes A, B, and C 

are the primary addresses used over the Internet and for TCP/IP data traffic. Class D 


Class A, B, C, D, and E is used for multicasting (explained in Chapter 7). The class E range is experimental 


The five classes of IPv4 
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and is not used on the Internet. A new IP addressing scheme called IPv6 has been de- 
veloped for use on the Internet. This address scheme is examined in section 5-7. 


TABLE 5-6 IPv4 Address Classes and Address Range 


Class IP Address Range 


A 0.0.0.0 to 127.255.255.255 

B 128.0.0.0 to 191.255.255.255 

C 192.0.0.0 to 223.255.255.255 

D 224.0.0.0 to 239.255.255.255 

E 240.0.0.0 to 254.255.255.255 
Note 


The 0.0.0.0 and 127.x.x.x addresses are special-purpose addresses. The 0.0.0.0 IP address 
refers to the source host on this network. The 127.x.x.x addresses are used as the Internet 
loopback address. A datagram sent by a higher-level protocol to an address anywhere 
within this block should loop back inside the host. The most common loopback address 
used is 127.0.0.1. The 127.x.x.x addresses should never appear on the network. 


Each IP address consists of four 8-bit octets, providing a total binary data 
length of 32 bits. Figure 5-12 shows the 32-bit structure for the IP address. Each octet 
in the IP address is expressed in terms of its decimal equivalent. The decimal equiv- 
alent representation of the four octets shown in Figure 5-12 is 10.10.20.1. The break- 
down for determining each octet in decimal and binary is provided in Table 5-7. 


decimal 10 ° 10 ° 20 ° 1 


binary 00001010 00001010 00010100 00000001 


octet-4 octet-3 octet-2 octet-1 
— 32 bits o 


FIGURE 5-12 The structure of the 32-bit IPv4 address. 


TABLE 5-7 Decimal—Binary Octet Breakdown for the 10.10.20.1 IPv4 


Address 

Octet Decimal Binary 

4 10 00001010 
3 10 00001010 
2 20 00010100 
1 1 00000001 


Representing the binary data in decimal form simplifies the user interface. 
TCP/IP uses the binary form (represented as 32 1/0 bits) for transporting the IP ad- 
dress, but the user interface is typically expressed in a dotted-decimal format. The 
10.10.20.1 IP address is an example of dotted-decimal. 
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Each of the four octets of the [Pv4 address represents either a network or a host 
portion of the IP address. The breakdown in each of the address classes for network 
and host bits is shown in Figure 5-13 and in Table 5-8. Class A has 8 bits assigned for 
the network address and 24 bits for the host. Class B has 16 bits for the network ad- 
dress and 16 bits for the host. Class C has 24 bits assigned for the network address 
and 8 bits for the host. 


Host Host Host 


class A Network 


class B 
class C 


Host Host 


Network Host 


ELE 
ELE 
EEE 
EEE 


Octet 


L 


FIGURE 5-13 The octets making up the network and host portions of the IPv4 address for 
classes A, B, and C. 


TABLE 5-8 Breakdown of the Network and Host Bits by Class 


Class Network Bits Host Bits 
A 8 24 

B 16 16 

C 24 8 


The number of host bits in the IP address classes determines how many hosts 
can be created for each class of address. The equation 


2” — 2, where n = number of host bits 


is used to calculate the number of host IP addresses that can be created for a 
network. For example, a class C address has 8 host bits; therefore 2° — 2 = 254 host 
IP addresses can be assigned to a class C network. The reason for the “ — 2” value in 
the equation when calculating the number of host addresses is the host IP address can- 
not be all 1s or all Os. The all 1s state is reserved for network broadcasts and the all 
Os state is reserved for the network address. Table 5-9 lists the total number of avail- 
able host IP addresses for each class of network. (A technique called subnetting is in- 
troduced in this chapter in section 5-5. This section shows how host bits are borrowed 
and added to the network address bit to create subnets in a network.) 


TABLE 5-9 Number of Host IP Addresses by Class 


Class Number of Host Bits Number of Hosts 
A 24 16,777,214 

B 16 65,534 

C 8 254 
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Private IP Addresses 


Address ranges in class A, B, and C have been set aside for private use. These ad- 
dresses, called private addresses, are not used for Internet data traffic but are intended 
to be used specifically on internal networks called intranets. Table 5-10 lists the pri- 
vate address ranges. 


TABLE 5-10 Private IP Addresses 


Class Address Range 

A 10.0.0.0 to 10.255.255.255 

B 172.16.0.0 to 172.31.255.255 

C 192.168.0.0 to 192.168.255.255 


The IP addresses used in this text are in the private address range. Functionally, 
private addresses work the same as public addresses except they are not routed on the 
Internet. These are called non-internet routable IP addresses and are blocked by 
Internet service providers. 


IP Address Assignment 


IP addresses are assigned by ARIN, the American Registry for Internet Numbers. 
Their Web address is http://www.arin.net. ARIN assigns IP address space to Internet 
service providers (ISPs) and end users, but only to those who qualify. This requires 
that the ISP or end user be large enough to merit a block of addresses. When blocks 
of addresses are allocated by ARIN to ISPs, the ISPs issue addresses to their cus- 
tomers. For example, a Telco could be the ISP that has a large block of IP addresses 
and issues an IP address to a user. A local ISP could also be assigned a block of IP 
addresses from ARIN, but the local ISP must have a large number of users. 

ARIN also assigns end users IP addresses. Once again, the end user must qual- 
ify to receive a block of addresses from ARIN. This usually means that the end user 
must be large. For example, many universities and large businesses can receive a 
block of IP addresses from ARIN. However, most end users will get their IP addresses 
from an ISP (for example, Telco) or have IP addresses assigned dynamically when 
they connect to the ISP. 


5-5 SUBNET MASKS 


The objective of this section 1s to demonstrate how to establish subnet masks for use 
in computer networks. Subnetting is a technique used to break down (or partition) 
networks into subnets. The subnets are created through the use of subnet masks. The 
subnet mask identifies what bits in the IP address are to be used to represent the net- 
work/subnet portion of an IP address. 

Subnets are created by borrowing bits from the host portion of the IP address. 
This is shown in Figure 5-14. The network portion of the IP address and the new sub- 
net bits are used to define the new subnet. Routers use this information to properly 
forward data packets to the proper subnet. The class C network shown in Figure 5-15 
is partitioned into four subnets. It takes 2 bits to provide four possible subnets; there- 
fore, 2 bits are borrowed from the host bits. This means the process of creating the 
four subnets reduces the number of bits available for host IP addresses. 
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FIGURE 5-14 Borrowing bits from the host to create subnets. 


192.168.12.0 


SM 255.255.255.192 
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FIGURE 5-15 Partitioning a network into subnets. 


Assume that the network has an IP address of 192.168.12.0. The 2 bits are bor- 
rowed from the host portion of the IP address to create the four subnets. A class C 
network has 24 network bits and 8 host bits. Two bits are borrowed from the host ad- 
dress to create the 4 subnets. The network plus subnet portion of the IP address is now 
24 + 2, or 26 bits in length, and the host portion is now 6 bits. The breakdown of the 
32-bit IP address is shown in Figure 5-16. 


Network Host 
m_n —nrn—_ 
24 + 2 = 26 bits 6 bits 


FIGURE 5-16 The breakdown of the IP address to allow for the creation of four subnets. 
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The equations for calculating the number of subnets created and the number of 
hosts/subnet are provided in Equations 5-1 and 5-2. 


# of subnets created pia [Equation 5-1] 
# of hosts/subnet ee [Equation 5-2] 


where x = # of bits borrowed from the host bits 

y = # host bits for the class of network 

(A = 24, B = 16, C=8) 

Breaking down the 192.168.12.0 network into four subnets required borrowing 
two host bits. Therefore, x = 2 and because this is a class C network, y = 8. 


x = 2 (the number of bits used from the host) 
y = 8 (number of bits for a class C network) 


Applying these values to equation 5-2 yields 


The number of subnets created = 2° = 2” = 4 
The number of hosts/subnet = 2972 = 28-2 = 64 


When creating subnets, it is important to note that each subnet will have both a 
network and a broadcast address. Taking this into consideration, the equations for cal- 
culating the number of hosts/subnet are modified to account for the number of usable 
hosts/subnet. The modified equations are as follows: 


The number of usable hosts/subnet = 2°” — 2 [Equation 5-3] 


The next step is to determine the subnet mask required for creating the four sub- 
nets. Recall that creating the four subnets required borrowing 2 host bits. The two 
MSB (most significant bit) positions, borrowed from the host and network portion of 
the IP address, must be included in the subnet mask selection. The purpose of the sub- 
net mask is to specify the bit positions used to identify the network and subnet bits. 
Applying the subnet mask is basically a logical AND operation. Setting the subnet 
mask bit position to a | enables the bit value from the IP address to pass. Setting the 
subnet mask bit value to O disables the IP address from appearing on the output. This 
is Shown in the truth table for a logical AND operation: 


Subnet Mask Bit IP Address Bit Output 
0 0 0 
0 1 0 
1 0 0 
1 1 1 


Notice that when the subnet mask bit is set to 0, the output is forced to 0. When 
the subnet mask bit is set to 1, the output follows the IP address bit. 

The subnet mask consists of bit position values set to either a 1 or a 0. A bit po- 
sition set to a 1 indicates that the bit position is used to identify a network or subnet 
bit. The subnet mask for identifying the class C network 192.168.12.0 will be 
255.255.255.x. This conversion is shown next. 


Binary 11111111 11111111 11111111 xxxxxxxxx 
Decimal 255 253 253 X 
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The subnet mask also identifies the subnet bits. The two MSBs were borrowed 
from the host bits; therefore, the last octet of the subnet mask will be 








I_-Subnet—_ | Host Addresses —] 
Place value 128 64 32 16 8 4 2 1 
1 1 X X X X X X 


where the 1 indicates this place is used for the subnet mask and the x means that 
the place value is left for the host address. Summing the two bit position values that 
have a 1 yields 128 + 64 = 192. The 192 is placed in the last octet of the subnet mask. 
The complete subnet mask is 255.255.255.192. 

The two subnet bits create four subnets, and each subnet has its own network 
address. The network addresses are used to route data packets to the correct subnet. 
Table 5-11 shows the four subnet addresses listed in both binary and decimal format. 

(Note: The six host bits are all set at 0 in a subnet’s network address.) 


TABLE 5-11 Binary and Decimal Equivalents for the Subnet’s 
Network Address 


Place Value 


128 64 Host Bits Subnet Address 


0 0 000000 0 
0 1 000000 64 
1 0 000000 128 
1 I 000000 192 


Each subnet will also have its own broadcast address. The broadcast address for 
the subnet is used to broadcast packets to all hosts in the subnet. (Note: All host bits 
are set to 1 for a broadcast.) Table 5-12 shows the binary and decimal equivalents for 
the subnet’s broadcast address. 


TABLE 5-12 Binary and Decimal Equivalents for the Subnet’s 
Broadcast Address 


Decimal 

|— Subnet —| |——— Host Bits ———| Equivalent 
Place Value 128 64 32 16 8 4 2 1 

0 0 1 1 1 1 1 1 63 

0 1 1 1 1 1 1 1 127 

1 0 1 1 1 1 1 1 191 

1 1 1 1 1 1 1 1 255 
Place Value 128 64 32 16 8 4 2 1 


Given this information, the network and broadcast address can be defined for 
the four subnets of the 192.168.12.0 network. These addresses for the four subnets 
are provided in Table 5-13. 
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TABLE 5-13 Network and Broadcast Addresses for the Four Subnets 
of the 192.168.12.0 Network 


Subnet Network Address Broadcast Address 
1st subnet (0) 192.168.12.0 192.168.12.63 

2nd subnet (64) 192.168.12.64 192.168.12.127 

3rd subnet (128) 192.168.12.128 192.168.12.191 

4th subnet (192) 192.168.12.192 192.168.12.255 


The same technique for subnet masking can be applied to class A, B, or C ad- 
dresses. The following examples demonstrate subnet mask selection in a network. 


| 
Example 5-8 


Given a network address of 10.0.0.0, divide the network into 8 subnets. Specify the 
subnet mask, the network and broadcast addresses, and the number of usable 
hosts/subnet. 


Solution: 


Creating 8 subnets requires borrowing 3 host bits; therefore x = 3. This is a class A 
network; therefore y = 24. 


Using equation 5-1, the number of subnets = 2? = 8. 
Using equation 5-3, the number of usable hosts = 2°* — 2 = 2097150. 
The 8 subnets will be 


128 64 32 Host Bits Subnet 
0 0 0 XXXXX 0 

0 0 1 XXXXX 32 

0 1 0 XXXXK 64 

0 1 1 TANNA 96 

1 0 0 XXXXX 128 

1 0 1 XXXXX 160 

1 1 0 XXXXX 192 

1 1 1 XXXXX 224 


Therefore, the network and broadcast addresses for the 8 subnets will be 


Subnet Network Address Broadcast Address 
O subnet (000) 10.0.0.0 10.31.255.255 

32 subnet (001) 10.32.0.0 10.63.255.255 

64 subnet (0 10) 10.64.0.0 10.95.255.255 

96 subnet (011) 10.96.0.0 10.127.235.253 

128 subnet (1 0 0) 10.128.0.0 10.159.255.255 

160 subnet (1 0 1) 10.160.0.0 10.191.255.255 

192 subnet (1 1 0) 10.192.0.0 10.223:255.255 

224 subnet (1 1 1) 10.224.0.0 10.255.255.255 


The subnet mask for creating the 8 subnets will be 255.224.0.0. 
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The 224 in Example 5-8 comes from setting the subnet mask to select the three 
MSB positions in the host portion of the address, as shown in Figure 5-17. 


Network 


plus Subnet bits Host bits 
— Oa 


Kod) L I) eA 


8+3 


FIGURE 5-17 The network, subnet, and host bit positions for creating the eight subnets 
in Example 5-8. 


Another way to look at selecting a subnet mask is by specifying how many us- 
able hosts are available to be assigned in a subnet. For example, assume that 62 us- 
able host addresses are to be available in a subnet. Assume this is for a class C 
network. Using Equation 5-2, 


622°" =2 
64 = 2%" 


Using logarithms to solve for x: 


log 64 = (8—x) (log 2) 
log 64/(log 2) = 8—x 
6 = 8-x therefore, x = 2 


Instead of using logarithms, a table such as that shown in Table 5-14 can be used. 
Example 5-9 shows how the table can be used to determine the subnet mask. 


TABLE 5-14 Number of Bits Borrowed to Create a Specific Number 
of Usable Hosts 


# of Host Bits Needed 
# of Usable Hosts ClassA  ClassB Class C 


1022 14 6 - 
510 15 7 - 
254 16 8 - 
126 17 9 - 
62 18 10 2 
30 19 11 3 
14 20 12 4 
6 21 13 5 
2 22 14 6 
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Example 5-9 


Determine the subnet mask required for the router-to-router link shown in Figure 
5-18 if only two host addresses are required for this link. 


172.116.34.1 






172.16312 


FIGURE 5-18 Setting a subnet mask for a router-to-router link that provides two host 
addresses. 


Solution: 


Using Table 5-14 to determine the number of host bits borrowed for creating a sub- 
net with two usable hosts, we find that 14 host bits are borrowed for this class B 
network. This means the first three octets plus the 6 MSB positions of the fourth 
octet will be used to create the subnet mask. The decimal equivalent for the six 
MSB bit positions is 128 + 64 + 32 + 16 + 8 + 4 = 252. 


Binary 11111111 11111111 11111111 111111xx 
Decimal 255 255 255 252 


Therefore, the subnet mask is going to be 255.255.255.252. 


Computers use the subnet mask to control data flow within networks. Comput- 
ers in a LAN use a subnet mask to determine whether the destination IP address is in- 
tended for a host in the same LAN or if the data packet should be sent to the gateway 
IP address of the LAN. The gateway IP address is typically the physical network in- 
terface on a layer 3 switch or a router. 

For example, assume that the IP address of the computer in the LAN is 
172.16.35.3. A subnet mask of 255.255.255.0 is being used. This means that all data 
packets with an IP address between 172.16.35.0 and 172.16.35.255 stay in the LAN. 
A data packet with a destination IP address of 172.16.34.15 is sent to the LAN gate- 
way. The 255.255.255.0 subnet mask indicates that all bits in the first three octets 
must match each other to stay in this LAN. 

This can be verified by “ANDing” the subnet mask with the destination address 
as shown: 


172.16.35.3 


255.255.255.0 
172.16.35.0 is in the same LAN subnet, sent to the gateway 


172.16.34.15 
253.253.233.0 
176.16.34.0 not in the same subnet as the LAN 
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Classful 
The IP and subnet addresses 
are within the same network 


Supernetting 

Allows multiple networks to 
be specified by one subnet 
mask 


CIDR 
Classless interdomain routing 


Prefix length notation 
Another shorthand technique 
for writing the subnet mask 
except class boundaries are 
not being crossed 


This section has demonstrated techniques for establishing subnets and subnet 
masks in computer networks. Examples have been presented that guide the reader 
through the process of borrowing bits to determining the number of available hosts in 
the subnet. The next section examines the concepts of expanding the subnet IP ad- 
dress range past the class boundaries using CIDR blocks. 


5-6 CIDR BLOCKS 


Up to this point, this chapter has focused on the issues of classful networks. Classful 
means that the IP addresses and subnets are within the same network. The problem 
with classful addressing is there is a lot of unused IP address space. For example, a 
class A IP network has more than 16 million possible host addresses. A class B net- 
work has more than 65,000 host addresses. The fact is only a limited number of class 
A and B address space has been allocated for Internet use. 

A technique called supernetting was proposed in 1992 to eliminate the class 
boundaries and to make available the unused IP address space. Supernetting allows 
multiple networks to be specified by one subnet mask. In other words, the class 
boundary could be overcome. 

Supernetting required a simpler way to indicate the subnet mask. The technique 
developed is called CIDR, classless interdomain routing. CIDR (pronounced 
“cider”) notation specifies the number of bits set to a 1 that make up the subnet mask. 
For example, the class C size subnet mask 255.255.255.0 is listed in CIDR notation 
as /24. This indicates the 24 bits are set to a 1. A class B size subnet is written as /16 
and a class A subnet is written as /8. CIDR can also be used to represent subnets that 
identify only part of the octet bits in an IP address. For example, a subnet mask of 
255.255.192.0 is written in CIDR as /18. The /18 comes from the 18 bits that are set 
to a 1 as shown: 


255 
11111111 


299 
11111111 


192 0 
11000000 00000000 


An alternative to the CIDR notation is the prefix length notation. This is an- 
other shorthand technique for writing the subnet mask. For example, the subnet mask 
255.255.255.192 is written as /26. This notation shows the number of network and 
host bits being used to create the subnet mask. In the case of a /26 subnet mask, 24 
network bits and 2 host bits are being used. Yes, this is basically the same as the CIDR 
except class boundaries are not being crossed and network bits are not being bor- 
rowed. 

A network address and the subnet mask of 192.168.12.0 255.255.252.0 can be 
written in CIDR notation as 192.168.12.0/22. Table 5-15 provides the CIDR for the 
most common subnet masks. 


TABLE 5-15 CIDR-Subnet Mask Conversion 


CIDR Subnet Mask CIDR Subnet Mask 

/8 255.0.0.0 Jel 255.255:248.0 

/9 255.128.0.0 jee. 295.255.252.0 

/10 255.192.0.0 J23 255.255.254.0 

/11 255.224.0.0 J24 255.255.2550 
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CIDR Subnet Mask CIDR Subnet Mask 


/12 255.240.0.0 /25 255.255.255.128 
/13 255.248.0.0 /26 255.255.255.192 
/14 255.252.0.0 /27 255.255.255.224 
/15 255.254.0.0 /28 255.255.255.240 
/16 255.255.0.0 /29 255.255.255.248 
/17 255.255.128.0 /30 255.255.255.252 
/18 255.255.192.0 /31 255.255.255.254 
/19 255.255.224.0 /32 255.255.255.255 
/20 255.255.240.0 


CIDR blocks are used to break down the class barriers in IP addressing. For ex- CIDR Block 
ample, two class C networks (192.168.78.0/24 and 192.168.79.0/24) can be grouped The grouping of two or more 
together as one big subnet. These two networks can be grouped together by modify- class networks together; also 
ing the /24 CIDR number to /23. This means that one bit has been borrowed from the Called supernetting 
network address bits to combine the two networks into one supernet. Writing these Supernets 
two networks in CIDR notation provides 192.168.78.0/23. This reduces the two class The grouping of two or more 
C subnets to one larger network. The group of networks defined by CIDR notation is class networks together; also 
called a CIDR block. When you group two or more classful networks together they called CIDR blocks 
are called supernets. This term is synonymous with CIDR blocks. The group of four 
IP addresses from 192.168.76.0 to 192.168.79.0 with a CIDR of /22 is a supernet. The 
supernet uses a CIDR subnet mask (/22) that is shorter than the number of network 
bits for class C network (/24). Another example of a supernet is 172.16.0.0/12. 
172.16.0.0 is a class B address and the CIDR subnet mask (/12) is less than the 16 
bits for the network portion of a class B address. 

The problem with randomly applying CIDR blocks to class A, B, and C ad- 
dresses is that there are boundaries in each class, and these boundaries can’t be 
crossed. If a boundary is crossed, the IP address maps to another subnet. For exam- 
ple, the CIDR block is expanded to include four class C networks. This means that 
all four class C networks need to be specified by the same CIDR subnet mask to avoid 
crossing boundaries. The new subnet mask is 255.255.252.0. The following example 
demonstrates what happens if a boundary is crossed. 


| 
Example 5-10 


Explore what happens if the boundary in IP addresses for class C subnets is 
crossed. For this example, the subnets have IP addresses of 


192.168.78.0/22 
192.168.79.0/22 
192.168.80.0/22 
192.168.81.0/22 


Solution: 


Applying the /22 subnet mask to 192.168.78.0 and 192.168.80.0 provides the fol- 
lowing. (Note: The binary values of the affected octet are shown, and applying the 
subnet mask means that the binary values of the IP address and the subnet mask are 
ANDed together.) 
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Place Value 128 64 32 16 8 4 2 1 
192.168.78.0 IP 0 1 0 O 41 1 #1 1 
255.255.252.0 SM 1 1 1 1 1 1 0 0 
192.168.76.0 0 1 0 O 1 1 O 0(76) 

64+8+4=76 
Now the same subnet mask is applied to the 192.168.80.0 subnet. 

Place Value 128 64 32 16 8 4 2 1 
192.168.80.0 IP 0 1 0 1 0 0 0 Ọ 
255.255.252.0 SM 1 1 1 1 1 1 0 0 
192.168.80.0 0 1 0 1 0 0 0 0(80) 

64 + 16 = 80 


IP = IP Address SM = subnet mask 


Applying the /22 subnet mask places these two IP addresses in different subnets. 
The first IP address is placed in the “76” subnet while the second IP address is 
placed in the “80” subnet. The boundary line has been crossed, placing the IP ad- 
dresses in different subnets when the /22 is applied. 


This example shows what will happen if a boundary is crossed in IP address- 
ing. If four class C subnets need to be grouped into one CIDR block, IP addresses 
from the ranges shown could be used: 


192.168.76.0 to 192.168.79.0 (all will be in the “76” subnet), or 
192.168.80.0 to 192.168.83.0 (all will be in the “80” subnet) 


Careful planning is required to make sure the IP addresses can all be specified 
by the same subnet mask. The goal of this section has been to develop an under- 
standing of supernets, classless routing, and CIDR blocks. The reader should also un- 
derstand the CIDR notation and be able to determine whether a group of IP addresses 
is in the same subnet. 


5-7 IPV6 ADDRESSING 


IPv6 IP version 4 (IPv4) is the current TCP/IP addressing technique being used on the In- 
IP version 6 ternet. Address space for IPv4 is quickly running out due to the rapid growth of the 
Internet and the development of new Internet-compatible technologies such as the IP 
addressable telephone. IP version 6 (IP v6) is the proposed solution for expanding the 
possible number of users on the Internet. IPv6 is also called IPng, the next genera- 
tion IP. 

IPv6 uses a 128-bit address technique, compared to IPv4’s 32-bit address struc- 
ture. IPv6 provides for a large number of IP addresses (2!7°). IPv6 numbers are writ- 
ten in hexadecimal rather than dotted decimal. For example, the following is a 32 
hexadecimal digit IPv6 address (Note: 32 hex digits x 4 bits/hex digit = 128 bits): 


6789: ABCD: 1234:EF98:7654:321F:EDCB:AF21 


Full IPv6 Address This is classified as a full IPv6 address. The full means that all 32 hexadeci- 


All 32 hexadecimal positions mal positions contain a value other than 0. 
contain a value other than 0 


IPng 
The next generation IP 
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On 


Why doesn’t IPv6 use the dotted decimal format of IPv4? It would take many 
decimal numbers to represent the IPv6 address. Each decimal number takes at least 7 
binary bits in ASCII (American Standard Code for Information Interchange) code. 
For example, the decimal equivalent of the first eight hexadecimal characters in the 
previous full IPv6 address is 


6 7 8 g A B C D 
103 A37 .171 .205 


The completed decimal equivalent number for the full IPv6 address is 
103.137.171.205.18.52.239.152.118.84.50.31.237.203.175.33 


The equivalent decimal number is 42 characters in length. In fact, the decimal 
equivalent number could be 48 decimal numbers long. 

In terms of bits, one 4 hex bit group requires 4 x 4 = 16 bits. Assuming that 8 
bits are used to represent the decimal numbers, it will take 12 x 8 = 72 bits to express 
one hex bit group in a decimal format. There is a significant bit savings obtained by 
expressing the IPv6 address in a hexadecimal format. 

IPv6 uses seven colons (:) as separators to group the 32 hex characters into 
eight groups of four. Some IPv6 numbers will have a O within the address. In this case, 
IPv6 allows the number to be compressed to make it easier to write the number. For 
example, assume that an IPv6 number is as follows: 


6789:0000:0000:EF98:7654:321F:EDCB:AF21 
Consecutive Os can be dropped and a double-colon notation can be used: 
6789::EF98:7654:321F:EDCB:AF21 


Recovering the compressed number in double-colon notation simply requires 
that all numbers left of the double notation be entered beginning with the leftmost slot 
of the IPv6 address. Next, start with the numbers to the right of the double colon. 

Begin with the rightmost slot of the IPv6 address slots and enter the numbers 
from right to left until the double colon is reached. Zeros are entered into any empty 
slots. 


IPv4 numbers can be written in the new IPv6 form by writing the IPv4 number 
in hexadecimal and placing the number to the right of a double colon. Example 5-11 
demonstrates how a dotted-decimal IP number can be converted to IPv6 hexadecimal. 


| 
Example 5-11 


Convert the IPv4 address of 192.168.5.20 to an IPv6 hexadecimal address. 
Solution: 
First convert each dotted-decimal number to hexadecimal. 


Decimal Hex 


192 CO 
168 A8 
5 05 
20 14 
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(Hint: use a calculator or a lookup table to convert the decimal numbers to hexadec- 
imal.) The IPv6 address will have many leading Os; therefore, the [Pv6 hex address 
can be written in double-colon notation as 


:: COA8:05 14 


IPv4 numbers can also be written in IPv6 form by writing the [Pv4 number in 
dotted-decimal format as shown. Note that the number is preceded by 24 hexadeci- 
mal Os. 


0000: 0000: 0000: 0000: 0000: 0000: 192.168.5.20 


This number can be reduced as follows: 


::192.168.5.20 
Unicast Address There are three types of IPv6 addresses: unicast, multicast, and anycast. The 
Used to identify a single unicast IPv6 address is used to identify a single network interface address and data 
network interface address, packets are sent directly to the computer with the specified IPv6 address. Multicast 
and data packets are sent IPv6 addresses are defined for a group of networking devices. Data packets sent to a 
directly to the computer with multicast address are sent to the entire group of networking devices, such as a group 
the specified IPv6 address of routers running the same routing protocol. Multicast addresses all start with the 


prefix FFOO::/8. The next group of characters in the IPv6 multicast address (the sec- 
ond octet) are called the scope. The scope bits are used to identify which ISP should 
carry the data traffic. The anycast IPv6 address is obtained from a list of addresses 
but is only delivered to the nearest node. 


Multicast Address 

Data packets sent to a 
multicast address are sent to 
the entire group of 


networking devices, such as IPv6 addressing is being used in a limited number of network sites (for exam- 
a group of routers running ple, www.6bone.com and the federal government) however, the Internet is still run- 
the same routing protocol ning IPv4 and will be for some time. However, there are transition strategies in place 
to help with the IPv4-to-IPv6 transition. 
se saris st of One possible transition to IPv6 is called the 6to4 Prefix, which is essentially a 
technique that enables [Pv6 sites to communicate over the IPv4 Internet. This re- 
addresses i . . 
quires the use of a 6to4-enabled router, which means that 6to4 tunneling has been en- 
6to4 Prefix abled. This also requires the use of a 6to4 Relay router that forwards 6to4 data traffic 
A technique that enables to other 6to4 routers on the Internet. 
IPv6 hosts to communicate Figure 5-19 illustrates the structure of the 6to4 prefix for hosts. The 32 bits of 
over the IPv4 Internet. the IPv4 address fit into the first 48 bits of the IPv6 address. 


hots —— 
i 13 o l6 64 bits 
FP TLA ID 


FIGURE 5-19 The 6to4 Prefix Format 









Note the following in Figure 5-19: 


e FP is the format prefix, which is made up of the higher order bits. The 001 in- 
dicates that this is a global unicast address. The current list of the IPv6 address 
allocation can be viewed at http://www.iana.org/assignments/ipv6-unicast- 
address-assignments. 
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e TLA ID (0x2002) is the top-level identifiers issued to local Internet registries. 
These IDs are administered by IANA (http://www.iana.org/). The TLA is used 
to identify the highest level in the routing hierarchy. The TLA ID 1s 13 bits long. 

e V4ADDR is the IPv4 address of the 6to4 endpoint and is 32 bits long. 

e SLA ID is the site level aggregation identifier that is used by individual orga- 
nizations to identify subnets within their sites. The SLA ID is 16 bits long. 

e Interface ID is the link-level host identifier, used to indicate an interface on a 
specific subnet. The interface ID is equivalent to the host IP address in IPv4. 


The 6to4 prefix format enables [Pv6 domains to communicate with each other 
even if they don’t have an IPv6 ISP. Additionally, IPv6 can be used within the intranet 
but access to the Internet is still available. The 6to4 provides unicast IPv6 connectiv- 
ity between IPv6 host and via the IPv4 Internet. 

When will the Internet switch to IPv6? The answer is not clear, but the net- 
working community recognizes that something must be done to address the limited 
availability of current IP address space. Manufacturers have already incorporated 
IPv6 capabilities in their routers and operating systems. What about IPv4? The bot- 
tom line is that the switch to IPv6 will not come without providing some way for IPv4 
networks to still function. Additionally, techniques such as Network Address Trans- 
lation (NAT—see Chapter 1) have made it possible for intranets to use the private ad- 
dress space and still be able to connect to the Internet. This has significantly reduced 
the number of IP addresses required for each network. 


5-8 ANALYZING COMPUTER NETWORKS—FTP 
DATA PACKETS 


This section explores the data packet contents of an FTP data transfer. FTP is the File FTP 
Transfer Protocol defined in the TCP/IP model. The captured file is available on the File Transfer Protocol 
companion CD-ROM in the Capture folder. The filename is 5-d.cap. This file 
contains several TCP transactions. This discussion will identify the packet IP for 
reference. 

Figure 5-20 provides the setup for this data capture. The MAC addresses for the 
client and server are provided as a reference. The beginning of the FTP 1s shown in 
packet 4 in Figure 5-21 (a). The packet shows that a connection is being made from 
a Windows server to port 1054 on a client computer. In packet 7, the client is re- 
sponding with a username of administrator. In packet 8 the server is telling the client 
that a password is required. The client responds with the password Chile in packet 10. 
In packet 13 the server acknowledges that the user administrator is connected to the 
server. 

In packet 17 [Figure 5-21 (b)] the client is notifying the server that an ASCII 
data transfer is requested. This is indicated in the Type A statement. In packet 18, the 
server acknowledges that an ASCII transfer is requested (Type set to A). Packet 23 is 
a request from the client to start the data packet transfer from the server. The text 
STOR text.txt signifies this. In packet 24 the server indicates that it is opening the 
ASCII mode for the transfer. When the FTP connection is established, the port num- 
bers change to handle the data transfer as shown in packet 30, SP = 20 DP = 1055. 
Packets 37, 39, and 40 are the closing of the FTP transfer [Figure 5-21 (c)]. The FTP 
data packets examined are part of a TCP connection. This required that a TCP con- 
nection was both established and closed. In fact, the TCP initial handshake and the 
connection closing for this FTP session were presented in section 5-2. 
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FIGURE 5-20 The computer setup for the FTP packet transfer. 
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| ID | Status | Elapsed [sec] size | Destination | Source | Summary 
000017 10.709.472.640 66 00107B7F8147 Dell 271F6B FIP Cc Port=1054 TYPE A 
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(a) The beginning of the FTP data packet transfer; (b) the request for an 


ASCII data transfer by the client; (c) the closing of the FTP transfer. 
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SUMMARY 


This chapter has presented an overview of the fundamentals of the TCP/IP protocol 
suite. TCP/IP is well established and carries the data traffic over the Internet. The stu- 
dent should understand the following: 


e The layers of TCP/IP and their relationship to the OSI layers 

e The basic structure of a 32-bit [Pv4 address 

e How to subnet a network 

e How to apply subnet masks in networks 

e The purpose of CIDR blocks and supernetting 

e The data structure of an IPv6 hexadecimal address 

e The structure and purpose of the 6to4 protocol 

e How to examine TCP/IP data packets with the Finisar Surveyor Demo Proto- 
col Analyzer 


QUESTIONS AND PROBLEMS 


Section 5-2 


1. What are the four layers of the TCP/IP model? 
2. Which layer of the TCP/IP model processes requests from hosts to make sure 
a connection is made to the appropriate port? 
3. What are well-known ports? 
4. Identify the port numbers for the following applications. 
a. Telnet 
b. HTTP 
c. FTP 
d. DNS 
e. DHCP 
5. Define the purpose of a connection oriented protocol. Give an example. 
6. What three packets are exchanged between two hosts when establishing a TCP 
connection? 
7. What is the purpose of a sequence number (SEQ=) in TCP data packets? 
8. Explain how a host knows whether a data packet was not received. 
9. Describe how a TCP connection is terminated. 
10. What is a connectionless protocol? Give an example. 
11. What is the purpose of the Internet layer in the TCP/IP protocol suite? 
12. What is the purpose of an ARP request? 
13. What is the purpose of an ARP reply? 
14. What important networking-troubleshooting tool is part of ICMP, and how does 
it test a network connection? 
15. When is IGMP used? 
16. The network interface layer of the TCP/IP model defines how the host connects 
to what network? 
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Section 5-3 


17. Convert the following 8-bit binary number to decimal: 10010011 
18. Convert the following octet to decimal: 1 1000000 

19. Convert the following 8-bit number to decimal: 11111100 

20. Convert the following binary number to decimal: 11111111 

21. Convert the number 192 to its binary equivalent. 

22. Convert the number 65 to its binary equivalent. 

23. Convert the number 96 to its binary equivalent. 

24. What is the equivalent hexadecimal number for 13? 

25. Convert OxSAF3 to binary. Use Table 5-5. 

26. Convert 1011011011110001 to hexadecimal. 


Section 5-4 


27. What is the IP address range for class C addresses? 
28. What is the purpose of class D IP addresses? 
29. How many bits are in an [Pv4 address? How many octets? 
30. The IP address is typically expressed in what format for the user? 
31. The IP address 192.168.12.2 is an example of what format? 
32. How many network bits are in each of the following classes? 
a. Class A 
b. Class B 
33. How many network and host bits are in a class C network address? 
34. What is the purpose of a private IP address? 
35. Can private IP addresses be routed? 
36. How are private IP addresses handled on the Internet? 
37. What organization assigns IP addresses? 


Section 5-5 


38. How many host bits are borrowed if four subnets are created? 

39. What is the purpose of a subnet mask? 

40. A host computer is assigned the IP address 192.168.12.8 and a subnet mask of 
255.255.255.192. The host sends a packet to another host with an IP address of 
192.168.12.65. Is the destination IP address in the same subnet as 
192.168.12.8? Show why or why not. 

41. The subnet mask 255.255.255.224 is applied to a packet with a destination IP 
address of 192.168.12.135. What subnet is the packet sent to? 

42. The subnet mask 255.255.255.0 is applied to a packet with the following IP ad- 
dresses. What subnet is the packet sent to? 

a. 10.20.35.12 
b. 10.20.35.3 

c. 10.50.35.6 

d. 192.168.12.8 





188 —. Chapter5 e TCP/IP 


43. Given an IP address of 193.10.10.0, answer the following questions if the num- 
ber of subnets created is 4. 
a. Determine the network address and the broadcast address for each 
subnet. 


Network Address Broadcast Address 
1st subnet 
2nd subnet 
3rd subnet 


4th subnet 


b. Determine the subnet mask: 
c. Determine the number of usable hosts per subnet: 

44. Given a network IP address of 211.123.83.0, answer the following questions if 
8 subnets are to be created. The 8 subnets include the network and broadcast 
address. 

a. Determine the network address and the broadcast address for each subnet. 


Network Address Broadcast Address 

Ist subnet 

2nd subnet 
3rd subnet 
4th subnet 
Sth subnet 
6th subnet 
7th subnet 


Sth subnet 


b. Determine the subnet mask: 
c. Determine the number of hosts per subnet 
45. Complete the following table, given class C subnetting. 





# Mask Bits Subnet Mask # Subnets # Hosts/Subnet 
2 255.255.255.192 4 62 

3 

4 

5 

6 
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47. 


48. 


49, 
50. 
sE 





I2: 
39. 


54. 
55: 


Section 5-6 


46. Complete the following table. 
Classless 
Interdomain 
Network Routing # Hosts/ 
Address Class (CIDR) Subnet Mask # Subnets Subnet 
128.123.0.0 B /30 255.255.255.252 16384 2 
135.45.0.0 /25 
193.10.10.0 /28 
211.123.83.0 /26 
10.0.0.0 /13 
32.0.0.0 /20 
204.204.5.0 /28 
223.201.65.0 [27 
156.35.0.0 /21 
116.0.0.0 /14 
145.23.0.0 /29 
199.12.1.0 /30 
15.0.0.0 /29 


How is a network address of 192.168.6.0 and a subnet mask of 255.255.254.0 
written in CIDR? 
A CIDR block contains the following subnets with IP addresses of 

a. 192.168.68.0/22 

b. 192.168.69.0/22 

c. 192.168.70.0/22 

d. 192.168.71.0/22 
Are there any problems with this group of subnets in the CIDR block? Show 
your work. 


Section 5-7 


How many bits are in an IPv6 address? 
IPv6 numbers are written in what format? 
Express the following IPv6 numbers using double-colon notation: 
a. 5355:4821:0000:0000:0000: 1234:5678:FEDC 
b. 0000:0000:0000: 1234:5678:FEDC:BA98:7654 
c. 1234:5678:ABCD:EF12:0000:0000: 1 122:3344 
Express the IPv4 IP address 192.168.12.5 in IPv6 form using dotted decimal. 
Recover the IPv6 address from the following double-colon notation: 


1234:5678::AFBC 


Define the structure of the 6to4 prefix. 
What is the purpose of the 6to4 relay router? 


Section 5-8 


56. 
Ik 
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What are the server port numbers for an FTP transfer? 
How does a client notify a server that an ASCII data transfer is requested? 


NO 


Critical Thinking 


58. Your boss has read about IPv6 and wants to know if the network you oversee is 
ready for the transition. Prepare a response based on the networking and com- 
puter operating systems used in your facility. 

59. Use the Surveyor Demo protocol analyzer software to capture the start of a TCP 
session in your network. Identify the packets that are part of the initial hand- 
shake. 


Surveyor IP Problems 


The following questions use the chapter 5-hw.cap file on the Net-Challenge 
CD-ROM. 


60. What routing protocols are used in this network? 

61. In the FTP exchange, what operating system is the server running? 
62. What is the destination address for the FTP server? 

63. What is the source address for the FTP transfer? 

64. What is the username sent to the FTP server? 

65. What is the password sent to the FTP server? 

66. What is the name of the file sent over FTP? 

67. What are the contents of the file? 

68. From Packet [D# 7, what is the FTP server requesting from the host? 
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CHAPTER OUTLINE 


6-1 Introduction 
6-2 Router Fundamentals 
6-3 The Console Port Connection 


6-4 The Router’s User EXEC Mode 
(Router>) 


OBJECTIVES 


Describe the purpose of a router 
Describe the purpose of a gateway 
Describe the steps (software and hardware) 


for connecting to a router’s console port 
Describe the Cisco IOS command structure o 
Define the function of the command-line in- 


terface 


Define the functional difference with the 
router’s user and privileged EXEC modes e 


KEY TERMS 


Cisco IOS 

command line interface 
(CLI) 

CCNA 

CCNP 

CCIE 

broadcast domain 

flat network 

routed network 

layer 3 network 

default gateway address 
next hop address 
subnet, NET 

RS-232 


DB-9 
DB-25 
console cable 


COM1, COM2,... 


rollover cable 
hostname 

user EXEC mode 
user mode 

? 

show flash 

show version 
router uptime 


privileged mode 


6-5 The Router’s Privileged EXEC Mode 
(Router#) 


6-6 ‘Troubleshooting the Router Interface 
Summary 
Questions and Problems 


Be able to enter basic router configuration 
modes 

Demonstrate that you can enable and disable 
certain router interfaces 

Demonstrate that you can perform basic 
router troubleshooting 

Describe what information is contained in the 
running-configuration file 

Define what it means for an interface to be ad- 
ministratively up or down 


enable 

Router# 

configure terminal (conf t) 
Router(config)# 
Router(config-line)# 
Router(config-if)# 

no shutdown (no shut) 
show ip interface brief (sh 
ip int brief) 

DCE 

DTE 

Keepalive packet 
administratively down 
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Cisco IOS 

Cisco Internet Operating 
System, the operating 
software used in all Cisco 
routers 


Command Line Interface 
(CLI) 

The interface type used for 
inputting commands and 
configuring devices such as 
routers 


CCNA 
Cisco Certified Network 
Associate 


CCNP 
Cisco Certified Network 
Professional 


CCIE 
Cisco Certified Internet 
Expert 
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6-1 INTRODUCTION 


The main objective of this chapter is to introduce the use of the Cisco IOS (Internet 
Operating System) software for configuring routers. Cisco IOS is the operating soft- 
ware used to configure all Cisco routers. It includes a command line interface (CLI) 
for inputting instructions to configure the Cisco router interface. There are many 
choices for routers in the market; however, Cisco routers have set the standard. Also, 
Cisco certifications such as the CCNA (Cisco Certified Network Associate), the 
CCNP (Cisco Certified Network Professional), and the professional benchmark for 
internetworking expertise, the CCIE (Cisco Certified Internet Expert), base their test- 
ing on the applicant’s ability to configure, troubleshoot, and analyze LANs that in- 
corporate Cisco routers and switches. 

An overview of router fundamentals is presented in section 6-2. Some of the 
router concepts and terminology presented in Chapter 4 are reexamined, in particu- 
lar the following: 


e The concepts of interconnecting LANs with routers 
e The concept of a network segment 
e Data flow through a routed network 


The procedure for configuring a router through the router’s console port is pre- 
sented in section 6-3. The discussion includes an overview of configuring a com- 
puter’s serial communication software and selecting the proper cable and hardware 
for connecting the console port to a computer. Sections 6-4 and 6-5 introduce the 
steps for accessing and programming the router interface. The user EXEC mode is 
examined in section 6-4, the privileged EXEC mode in section 6-5. These sections 
teach the reader how to work with the Cisco [OS command structure and how to ac- 
cess many of the configuration layers in the Cisco IOS. Sections 6-4 and 6-5 also in- 
clude networking challenges using the Net-Challenge software included with the 
accompanying companion CD-ROM. These challenges enable students to test their 
ability to access and program a router’s interface. The simulator software was devel- 
oped specifically for this text and emulates programming the interface of a Cisco 
router. The console port connection is emulated with the software, and although the 
simulator doesn’t emulate all the router programming modes or operational features, 
it does emulate the functions presented in the text. The chapter concludes with a sec- 
tion on troubleshooting the router interface. This section introduces a commonly used 
router command and how the command is used to troubleshoot and isolate router con- 
figuration problems. 


6-2 ROUTER FUNDAMENTALS 


This section further defines the function of a router in a network and describes how 
data packets travel through a layer 3 network. A layer 3 network uses IP addressing 
for routing data packets to the final destination. Delivery of the data packets 1s made 
possible by the use of a destination MAC address, IP address, network addresses, and 
routing tables. Each of these concepts is examined in this section. 

LANS are not necessarily restricted in size. A LAN can have 20 computers, 200 
computers, or even more. Multiple LANs also may be interconnected to essentially 
create one large LAN. For example, the first floor of a building could be set up as one 
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LAN, the second floor as another LAN, and the third floor another. The three LANs 
in the building can be interconnected into essentially one large LAN using switches, 
with the switches interconnected as shown in Figure 6-1. 


3rd floor 


2nd floor 


Ist floor 








FIGURE 6-1 Three floors of a building interconnected using switches to form one 
large LAN. 


Is it bad to interconnect LANs this way? As long as switches are being used to Broadcast Domain 
interconnect the computers, the impact of the interconnected LANs has minimal im- Any broadcast sent out on 
pact on network performance. This is true as long as there are not too many comput- the network is seen by all 
ers in the LAN. The number of computers in the LAN is an issue because layer 2 hosts in this domain 
switches do not separate broadcast domains. This means that any broadcast sent out 
on the network (for example, the broadcast associated with an ARP request) will be 
sent to all computers in the LAN. Excessive broadcasts are a problem because each 
computer must process the broadcast to determine whether it needs to respond, and 
this essentially slows down the computer and the network. Virtual LANs are now be- 
ing used to interconnect LANs. This concept is examined in Chapter 9. 

A network with multiple LANs interconnected together at the layer 2 level is Flat Network 
called a flat network. A flat network is where the LANs share the same broadcast ^A network where the LANs 
domain. The use of a flat network should be avoided if possible for the simple reason > hare the same broadcast 
that the network response time is greatly affected. Flat networks can be avoided by domain 
the use of layer 3 networks. This topic is discussed next. 


Layer 3 Networks 


In both the simple office type LAN introduced in Chapter 1 and the building LAN 
just discussed, the hosts are interconnected with a switch or a hub. This allows data 
to be exchanged within the LAN; however, data cannot be routed to other networks. 
Also, the broadcast domain of one LAN is not isolated from another LAN’s broad- 
cast domain. The solution for breaking up the broadcast domains and to provide 
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Routed Network network routing is to incorporate routing hardware into the network design to create 


Uses layer 3 addressing for a routed network. A routed network uses layer 3 addressing for selecting routes to 
selecting routes to forward forward data packets, so a better name for this network is a layer 3 network. 
data packets In layer 3 networks, routers and layer 3 switches are used to interconnect the 


networks and LANs, isolating broadcast domains and enabling hosts from different 
LANs and networks to exchange data. Data packet delivery is achieved by handing 
off data to adjacent routers until the packet reaches its final destination. This typically 
involves passing data packets through many routers and many networks. An example 
of a layer 3 network is shown in Figure 6-2. This example has four LANs intercon- 
nected using three routers. The IP address for each networking device is listed. How 
does information get from computer Al in LAN A to computer C1 in LAN C? The 
following discussion describes the travel of the data packets. 


Layer 3 Network 
Another name for a routed 
network 


10.10.100.0 Net 


f 


segment 





FA0/2 | Router A Router B Router C | FA0/2 


10.10.200.0 Net 10.10.150.0 Net 
FA0/1 FA0/2 FA0/3 FA0/1 


FA0/0 FA0/0 FA0/1 FA0/0 


<< — segment ————____> a segment —————————> 


10.10.20.0 Net 10.10.10.0 Net 10.10.1.0 Net 10.10.5.0 Net 


LAN B LAN C LAN D 
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LAN C Server 





Router A Port Addresses (LAN A Router B Port Addresses (LAN B Router B Port Addresses (LAN C Router Port Addresses (LAN D 


FastEthernet 0/0 10.10.20.250 | FastEthernet 0/0 10.10.10.250 | FastEthernet 0/1 10.10.1.250 FastEthernet 0/0 10.10.5.250 
(Gateway Address) (Gateway Address) (Gateway Address) (Gateway Address) 

FastEthernet 0/1 10.10.200.1 FastEthernet 0/2 10.10.200.2 FastEthernet 0/2 10.10.200.2 FastEthernet 0/1 10.10.150.2 

FastEthernet 0/2 10.10.100.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/2 10.10.100.2 


LAN A Computers LAN B Computers LAN C Computers LAN D Computers 


Computer A1 10.10.20.1 Computer B1 10.10.10.1 Computer C1 10.10.1.1 Computer D1 10.10.5.1 
Computer A2 10.10.20.2 Computer B2 10.10.10.2 Computer C2 10.10.1.2 Computer D2 10.10.5.2 


Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 


FIGURE 6-2 An example of a layer 3 network using routers to interconnect the LANs. 


Default Gateway Address Computer A1 (IP address 10.10.20.1) sends a data packet to computer C1 (IP 
The IP address of the address 10.10.1.1). First, computer Al uses the assigned subnet mask 
networking device used to (255.255.255.0) to determine whether the destination IP address 10.10.1.1 is in the 
forward data that needs to same subnet or network as itself. Applying the subnet mask to the destination address 
avec an shows the final destination of the data packet is the 10.10.1.0 network (10.10.1.0 
NET). This is not the same subnet or network in which computer Al resides 
(10.10.20.0 NET). Therefore, the data packet is forwarded to the default gateway 
address defined by the computer. The default gateway address is the IP address of a 
networking device (for example, a router) used to forward data that needs to exit the 
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LAN. An example of setting a computer’s default gateway is provided in Figure 6-3. 
The default gateway address for computer Al is 10.10.20.250. This is the IP address 
of Router A’s FastEthernetO/0 port. Figure 6-2 shows that Router A’s FastEthernet 
FAO/0 port connects directly to the switch in LAN A. 


Internet Protocol Version 4 (TCP/IPv4) Properties 


General 


You can get IP settings assigned automatically if your network supports 
this capability. Otherwise, you need to ask your network administrator 
for the appropriate IP settings. 


© Obtain an IP address automatically 


@ Use the following IP address: 





IP address: 10.10.20. 





Subnet mask: 255.255 . 255. 





Default gateway: 10 . 10 . 20 . 250 


Obtain DNS server address automatically 


@ Use the following DNS server addresses: 





Preferred DNS server: 





Alternate DNS server: 








FIGURE 6-3 The TCP/IP menu for setting the default gateway address for computer A1. 


Recall that the term gateway describes the networking device that enables data 
to enter and exit a LAN, and is where the host computers forward data packets that 
need to exit the LAN. In most networks, the gateway is typically a router or switch 
port address. An example of a gateway is provided in the block diagram shown in Fig- 
ure 6-4. An important concept is that the IP address of the gateway must be in the 
same subnet as the LAN that connects to the gateway, and this same gateway enables 
data traffic to enter and exit the LAN. An example of using the subnet mask to de- 
termine the destination network is provided in Example 6-1. 






ee 


Data 
exit 


FIGURE 6-4 Data flow to and from the gateway. 
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| 
Example 6-1 


Problem: 


A computer host sends two data packets out on the network. Each packet has a dif- 
ferent IP destination address. Determine whether the data packets are to be for- 
warded to the default gateway or should remain in the same LAN as the host. The 
source host IP address is 10.10.20.2, and a subnet mask of 255.255.255.0 is being 
used. The destination IP addresses for the data packets are 10.10.1.1 and 
10.10.20.3. 


Solution: 


First determine the network or subnet where the source host resides. This can be de- 
termined by “ANDing” the subnet mask with the source host IP address as shown. 
Subnet masks and subnets were presented in Chapter 5, section 5-5, and should be 
reviewed if this concept is difficult to follow. Remember, subnet masking 1s a bi- 
nary AND operation. The decimal numbers are the equivalent of the 8-bit binary 
number. For example: 


239 11111111 
20 00010100 
10 00001010 


2 00000010 
Source IP address 10. 10. 20. 2 
Subnet mask 255.255. 255.0 
Subnet 10. 10. 20. 0 


Therefore, the source host is in the 10.10.20.0 subnet (10.10.20.0 NET). 


a. Determine the destination network for a data packet given the following informa- 
tion: 


Destination IP address 10. 10. 1. 1 
Subnet mask 253.255.253.0 
Subnet 10. 10. 1.0 


Answer: The destination subnet address for Part a is 10.10.1.0. This is not in the 
same subnet as the 10.10.20.2 host (10.10.20.0 NET). Therefore, the data packet is 
forwarded to the default gateway. 

b. Determine the destination network for a data packet given the following informa- 
tion: 


Destination IP address 10. 10. 20. 3 
Subnet mask 255.255.255. 0 
Subnet 10. 10. 20. 0 


Answer: The destination subnet address for Part b is 10.10.20.0, which is the same 
subnet as the host. Therefore, the data packet remains in the 10.10.20.0 subnet. 
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The IP address of the data packet sent from the source computer to the gateway Next Hop Address 
is examined by the router and a next hop address is selected. The gateway examines The IP address of the next 
the destination IP address of all data packets arriving at its interface. The router uses networking device that can 
a routing table to determine a network data path and the next hop address. As noted be used to forward the data 
previously, a routing table is a list of the possible networks that can be used to route Packet to its destination 
the data packets. Alternative data paths are usually provided so that a new route can 
be selected and data delivery maintained even if a network route is down. The next 
hop address is the IP address of the next networking device that can be used to for- 
ward the data packet to its destination. 
For example, assume that a data packet is to be delivered from a host in LAN 
A to a destination address in LAN C (see Figure 6-2). The data packet is forwarded 
to the LAN A gateway, which is the FastEthernet 0/0 (FA0/0) port on Router A. The 
router examines the data packet and determines that the data can be sent to the host 
in LAN C via Router A’s FastEthernet 0/2 (FAO/2) interface over the 10.10.100.0 
NET to Router C, then to Router B, and finally to LAN C. The routing table also 
shows that there is a route to LAN C via Router A’s FastEthernet 0/1 (FAOQ/1) inter- 
face over the 10.10.200.0 NET. The next hop off Router A’s FastEthernet 0/1 (FA0/1) 
interface is the FAQ/2 FastEthernet interface on Router B. Which is the better route? 
In terms of hops, data from LAN A will have to travel over two hops (Router C 
and Router B) to reach LAN C. The route to LAN C via Router B requires only one 
hop; therefore, Router A will select the 10.10. 200.0 NET to route the data to LAN C 
because its has fewer router hops. The IP address of the FastEthernet 0/2 (FAO/2) port 
on Router B is called the next hop address. In each case, the next hop address is the 
IP address of the next networking device. For example, if the data travels to LAN C 
via Router B, the next hop address off Router A is the IP address of the FastEthernet 
0/2 (FAQ/2) port on Router B (10.10.200.2). 
The MAC addresses are used to define the hardware address of the next hop in 
the network. When the next hop is defined, its MAC address is determined and the 
data packet is relayed. 
When the routes are fully configured, data packets can be exchanged between 
any LANs in the interconnected routed network. For example, data can be exchanged 
between any of the hosts in any of the LANs shown in Figure 6-2. Computer A2 in 
LAN A can exchange data with computer D1 in LAN D, and computer C1 in LAN C 
can exchange data with computer B2 in LAN B. This differs from the simple office 
LAN that has restricted data packet delivery: The data packets can be exchanged only 
within the LAN. Using IP addressing and routers enables the data to be delivered out- 
side the LAN. Recall that a segment in a network defines the physical link between 
two internetworking devices (for example, router-hub, router-switch, or router- 
router). For example, in an interconnected network, a segment is the name of the link 
between a router and another router. Another example is the segment that connects a 
router to a LAN viaa hub or a switch. Each network segment has its own network ad- 
dress. For the small campus network shown in Figure 6-2, the network IP address for 
the segment connecting LAN A to the router is 10.10.20.0. All hosts connected to this 
segment must contain a 10.10.20.#. For example, Computer A1 is assigned the IP ad- 
dress 10.10.20.1. 
The segment is sometimes called the subnet or NET. These terms are associ- Subnet, NET 
ated with a network segment address, such as 10.10.20.0. In this case, the network is Other terms for the segment 
called the 10.10.20.0 NET. All hosts in the 10.10.20.0 NET will have a 10.10.20.# IP 
address. The network addresses are used when configuring the routers and defining 
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what networks are connected to the router. For example, the networks attached to 
Router A in Figure 6-2 are listed in Table 6-1. 

The physical layer interface on the router provides a way to connect the router 
to other networking devices on the network. For example, the FastEthernet ports on 
the router are used to connect to other FastEthernet ports on other routers. Gigabit and 
10 gigabit Ethernet ports are also available on routers to connect to other high-speed 
Ethernet ports. (The sample network shown in Figure 6-2 includes only FastEthernet 
ports.) Routers also contain serial interfaces that are used to interconnect the router 
and the network to other serial communication devices. For example, connection to 
wide area networks requires the use of a serial interface to connect to a communica- 
tions carrier such as Sprint, MCI, AT&T, and so on. The data speeds for the serial 
communication ports on routers can vary from slow (56 kbps) up to high-speed DS3 
data rates (47+ Mbps), OC3 (155 Mbps), OC12 (622 Mbps), or even OC192 (9953 
Mbps). 

The following is a summary of the discussion on layer 3 networks. The com- 
ponents of a layer 3 network are shown in Figure 6-5. The source host computer has 
an installed network interface card (NIC) and an assigned IP address and subnet 
mask. 


TABLE 6-1 The Networks (Subnets) Attached to Router A in Figure 6-2 


Router Port Subnet 
FA0/0 10.10.20.0 
FA0/1 10.10.200.0 
FA0/2 10.10.100.0 
NIC NIC 
MAC address ; , MAC address 
Routing Routing 


Tables , , Lables 


[o] [000000] [00] 












































Destination 





Source [O] [OO] 
Host IP address 
Gateway address 
Subnet Mask 


S Host IP address 
`S Default Gateway address 


Default / l 
Subnet Mask 


Gateway Gateway 


FIGURE 6-5 The components of a layer 3 network. 


The subnet mask is used to determine whether the data is to stay in the LAN or 
is to be forwarded to the default gateway provided by the router. The router uses its 
subnet mask to determine the destination network address. The destination network 
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address 1s checked with the router’s routing table to select the best route to the desti- 
nation. The data is then forwarded to the next router, which is the next hop address. 
The next router examines the data packet, determines the destination network ad- 
dress, checks its routing table, and then forwards the data to the next hop. If the des- 
tination network is directly connected to the router, it issues an ARP request to 
determine the MAC address of the destination host. Final delivery is then accom- 
plished by forwarding the data using the destination host computer’s MAC address. 
Routing of the data through the networks is at layer 3 and the final delivery of data in 
the network is at layer 2. 


6-3 THE CONSOLE PORT CONNECTION 


The router’s console port is used as the initial interface for configuring the router. It 
is a Slow-speed serial communications link (9600 bps) and is the only way to com- 
municate with the router until the router interfaces have been configured. Specifically, 
the console connection is an RS-232 serial communications port that uses an RJ-45 
jack to connect to its interface. The RS-232 protocol running on the console port is 
the same communications protocol format used on a computer’s (COM1, COM2) 
port; however, the connector for the serial communications port on the computer is 
either a DB-9 or DB-25 type connector. (Note: DB25 connectors are seldom used.) 
Figure 6-6 (a) and (b) shows drawings of the DB-9 and DB-25 connector ends. The 
DB-9 connection uses nine pins and the DB-25 connection uses 25 pins. 


FIGURE 6-6 (a) DB-9 connector; (b) DB-25 connector (courtesy of StarTech.com). 


The connection from the router to the serial port on the computer requires a ca- 
ble run from the computer’s serial port to the RJ-45 console jack input on the router. 
This can be accomplished using a cable with the DB-9 and RJ-45 plug ends, as shown 
in Figure 6-7 (a), or using an RJ-45 rollover cable and a DB-9 to RJ-45 adapter as 
shown in Figure 6-7 (b). Another option is to use a USB to 9-pin RS-232 adapter as 
shown in Figure 6-7 (c). A cable that connects the router’s console port to the com- 
puter’s serial port is called a console cable. 

Connect the DB-9 end of the console cable to any of the available serial ports 
(COM1, COM2,...) on the computer. The router’s console input uses an RJ-45 jack 
and the console cable must have an RJ-45 plug. The cable used to connect the RJ-45 
plug to the computer is called a rollover cable, which is a flat cable that reverses sig- 
nals on each cable end; for example, pins 1-8, 2—7, 3—6, and so on. Table 6-2 shows 
the signal assignments and pin number for each end of the rollover cable. Note that 
the pin numbers for the cables are swapped at each end. 
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FIGURE 6-7 (a) A console cable with an integrated DB-9 connector; (b) a console cable 
using an RJ-45 rollover cable and a DB-9 to an RJ-45 adapter; (c) a USB to RS-232 adapter 
(courtesy of StarTech.com). 


TABLE 6-2 Signal and Pin Assignments for the Console Rollover 


Cable 

Signal Function RJ-45 end A RJ-45 end B 
RTS Ready-to-Send 1 8 

DTR Data Terminal Ready 2 7 

TXD Transmit Data 3 6 

GND Ground 4 5 

GND Ground 5 4 

RXD Receive Data 6 3 

DSR Data Send Ready 7 2 

CTS Clear-to-Send 8 1 


A serial communications software package such as HyperTerminal can be used 
to establish the communications link to the router’s console input. The settings for the 
serial interface on a Cisco router’s console port are provided in Table 6-3. 


TABLE 6-3 Settings for Connecting to the Router Console Port 


Bits persecond 9600 


Data bits 8 
Parity None 
Stop bits 1 
Flow control none 
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The next step is to set up the console connection from a computer to the router. 
This requires that one RJ-45 end of a rollover cable be connected to the console port 
in the back of the router. The other end of the cable connects to one of the 9-pin ser- 
ial communication ports (COM ports) of the computer. Note which serial port you 
connect to. You will have to specify the serial port (for example, COM1, COM2, and 
so on) when configuring the HyperTerminal serial communications software. 


Configuring the HyperTerminal Software (Windows) 


The HyperTerminal software is available on Windows XP but must be purchased sep- 
arately for Windows Vista. After HyperTerminal is installed, click Start—Pro- 
grams—Accessories—Communications and click HyperTerminal to start the 
HyperTerminal software on your computer. Click Start—Programs—H)ypertermi- 
nal on Windows Vista. The Connection Description menu shown in Figure 6-8 will 
appear. Enter a name for your connection, such as CiscoRouter, and select an icon to 
be associated with the connection. Click OK when done. 


Connection Description 


ww, New Connection 


Enter a name and choose an icon for the connection: 


Name: 























FIGURE 6-8 The HyperTerminal Connection Description menu. 


The next menu displayed is shown in Figure 6-9. This is the Connect To menu, 
which lets you specify how you are making the serial connection to the router. This 
example shows the connection is configured to use the computer’s COM2 serial port. 
Change the Connect Using parameter to match the connection (COM1, COM2,...) 
you have made on your computer. Click OK when done. 


Connect To 


B CiscoR outer 


Enter details for the phone number that you want to dial: 


Country/region: Hnited States |] 


Area code: 505 


Phone number: 


Connect using: | [mn) i v 























FIGURE 6-9 The HyperTerminal Connect To menu. 
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The next menu is the Properties menu for your serial connection. This menu is 
labeled COM2 Properties because the Connect Using COM2 parameter was speci- 
fied in the previous menu. Recall that the settings for connecting to the router’s ser- 
ial console port were provided in Table 6-3. The COM2 properties will have to be set 
to match these settings. Figure 6-10 shows the COM2 Properties menu with the set- 
tings entered. Click OK when done, and the CiscoRouter—HyperTeminal screen 
will be displayed. Press Enter to start the terminal communications. You should see 
the image shown in Figure 6-11 when a connection has been established. If the text 
does not display Press RETURN to get started, press Enter to see whether the router 
resets itself. Another possible screen you might see might have only the Router> 
prompt. Press Enter, and if the Router> prompt remains, you are connected. If this 
doesn’t correct the displayed text, the router might need to be restarted. 


COM2 Properties 


Port Settings | 


Bits per second 
Data bits: 
Parity: 

Stop bits: 


Flow control: 





FIGURE 6-10 The Properties menu for configuring the serial port connection. 


è Cisco Router - HyperTerminal 
File Edit View Call Transfer Help 


Dae @3 D228 





Router conl is now available 





Press RETURN to get started! 











Connected 0:00:37 Auto detect Auto detect 


FIGURE 6-11 The Cisco router console port—HyperTerminal screen. 


Chapter6 œ Introduction to Router Configuration 


an RRA 


Configuring the Z-Term Serial Communications Software (Mac) 


The following are the steps for establishing a console port via the USB serial con- 
nection on the Mac computer. This requires the following: 


e A serial communication software such as ZTerm. ZTerm is a shareware pro- 
gram for the Mac that can be downloaded from the Internet. 

e A USB to a 9-pin RS-232 male serial adapter, such as the USB to 9-pin adapter 
cable shown in Figure 6-7 (c). (Note: The USB-serial adapter can require that 
an additional driver be installed.) 


Install the serial communications software and the driver. Start the serial com- 
munications software. Click Setting—Modem Preferences as shown in Figure 6-12. 
This opens the window shown in Figure 6-13. You will need to change the serial port 
so that it is set to usbserial0, and click OK when the change to usbserialO has been 
made. Next, click Settings—Connection to open the menu shown in Figure 6-14. 
The following settings need to be set for the serial console connection. Click OK 
when done. 


Data Rate: 9600 
Data Bits: 8 

Parity: N 

Stop Bits: 1 
Hardware Handshake 


SOMME Macros misc 


Connection... 
Terminal... 

Text Pacing... 
Transfer Options... 
ZModem Options... 


General Preferences... 
Terminal Preferences... 
Printer Preferences... 
Modem Preferences... 


Color Preferences... 
Receive Folder... 


FIGURE 6-12 The Mac OS X menu for configuring the settings for the serial interface. 





@ ZTerm File Edit Dial atue Macros Misc 





Serial Port: | usbserialO Hs 
Modem setup strings: 
Initialize: |ATEL V1AM 


Dial Substitution: Dial Timeout: 


.2 C Hardware Hangup (DTR) 
a 





FIGURE 6-13 The Mac OS X menu for setting the serial port to usbserial0. 
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@ ZTerm File Edit Dial Atu Macros Misc 


Service Name: 
Phone Number: [ O 
Pre-dial init: [ O 
Account: [ O] Password: [ e] 


Data Rate: 9600 B Data Bits: | 8 He F 
Parity: None B Stop Bits: | 1 EJ 


[_] Local Echo 
Flow Control: {)Xon/Xoff M Hardware Handshake 








D a 





FIGURE 6-14 The Mac OS X window listing the serial communication link settings. 


6-4 THE ROUTER’S USER EXEC MODE (ROUTER>) 


This section introduces the use of the Cisco Internetwork Operating System (Cisco 
IOS) used for configuring Cisco routers. Cisco IOS, the standard interface software 
available on all Cisco routers, is regularly updated, thus providing improved config- 
uration, management, and monitoring capabilities. 

The Cisco IOS structure is fairly easy to navigate after you learn a few basic 
commands. Cisco IOS uses a command line interface (CLI) for inputting commands 
when configuring Cisco routers. This section explains some simple concepts, such as 
how to access the Help menu, using the show commands, and configuration options. 
The text comes with the Net-Challenge Companion CD-ROM that includes a router 
simulator specifically developed for this text. The simulator enables you to practice 
accessing various router modes and gain practice configuring a router for use in a net- 
work. The networking challenges presented in the text are available with the Com- 
panion CD-ROM for testing your knowledge. 


The User EXEC Mode 


The first text you see on the terminal screen after a console connection is made to the 
router is Router con0 is now available. This text confirms that you have connected 
to the router’s console port. 


Router con® is now available Press RETURN to get started! Router> 


Hostname You are prompted to Press RETURN to get started! Press Return (the Enter 
The name assigned to a key on the keyboard) to connect to the router. The prompt Router> indicates that you 
networking device have connected to a router with the hostname Router, and the > symbol indicates that 


you have entered the user EXEC mode on the router. The user EXEC mode, also 
called the user mode, is the unsecured first level of entry passed through when ac- 
cessing the router’s interface. It does not allow the user any access to the router’s con- 
figuration options. However, some of the router parameters, such as the version of the 


User Mode Cisco IOS software running on the machine, memory, flash, and the available com- 
Same as the user EXEC mode mands, can be viewed. 


User EXEC Mode 
Used by a user to check to 
router status 
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You can view the commands that are recognized at the user level by enteringa ? 
? after the Router> prompt. The ? is the universal help command in Cisco IOS that The help command that can 
allows you to view the available commands from any prompt. The following shows be used at any prompt in the 
an example of using the ? command to display the available commands from the command line interface for 
Router> prompt: the Cisco IOS software 


Router>? 

Exec commands: 

access-enable Create a temporary Access-List entry 

clear Reset functions 

connect Open a terminal connection disable Turn off privileged 
commands 

disconnect Disconnect an existing network connection 

enable Turn on privileged commands 

exit Exit from the EXEC 

help Description of the interactive help system lock Lock 
the terminal 

login Log in as a particular user logout Exit from the EXEC 

mrinfo Request neighbor and version information from a multi- 
cast router 

mstat Show statistics after multiple multicast traceroutes 

mtrace Trace reverse 

multicast path from destination to source 

name-connection Name an existing network connection 

pad Open a X.29 PAD connection ping Send echo messages 

ppp start IETF Point-to-Point Protocol (PPP) 

resume Resume an active network connection 

rlogin Open an rlogin connection 

set Set system parameter (not config) show 

Show running system information 

slip Start Serial-line IP (SLIP) 

systat Display information about terminal lines 

telnet Open a telnet connection 

terminal Set terminal line parameters 

traceroute Trace route to destination 

tunnel Open a tunnel connection 

where List active connections 

x28 Become an X.28 PAD 

x3 Set X.3 parameters on PAD 


It’s obvious from the Router> help listing that the command options are quite 
extensive, and it takes some time to master them all. The objective of this chapter is 
to introduce the fundamental commands required for navigating the Cisco IOS and 
for configuring the router’s interface. In particular, this section concentrates on the 
commands and procedures for configuring the router’s FastEthernet and serial ports. 

Another way to display commands or features is to place a ? after the com- 
mand. For example, placing a ? after the show command lists all the options avail- 
able for the show command. 


Router>show ? 
The ? following a command can be used after any command from any prompt 
in the command line interface in the Cisco IOS software. An example of placing the 


? after the show command at the Router> prompt lists the available options in the 
user mode for the show command: 


Router>show ? 


backup Backup status 
clock Display the system clock 
dialer Dialer parameters and statistics 
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show flash 
Lists the details of the 
router's flash memory 


show version 

Lists the version of the Cisco 
IOS software running on the 
router 


Router Uptime 
The amount of time the 
router has been running 
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flash: 


display information about flash: file system 


history Display the session command history 

hosts IP domain-name, lookup style, nameservers, and host table 
location Display the system location 

modemcap Show Modem Capabilities database 

ppp PPP parameters and statistics 

rmon rmon statistics 

rtr Response Time Reporter (RTR) 

sessions Information about Telnet connections 

snmp snmp statistics 

tacacs Shows tacacs + server statistics 

terminal Display terminal configuration parameters 

traffic-shape Traffic rate shaping configuration 

users Display information about terminal lines 

version System hardware and software status 


Two key options for show in the user (Router>) mode are show flash and show 
version. Show flash lists the details of the router’s flash memory, while show version 
lists the version of the Cisco IOS software running on the router. Examples of each 
are provided. 

The show flash command displays the flash memory available and the amount 
of flash memory used. This command is typically used to verify whether there is suf- 
ficient memory available to load a new version of the Cisco IOS software. In this ex- 
ample, the IOS software is already installed, the file length is 6788464, and the name 
of the file is c2500-d-1.120-4. 


Router>show flash 

System flash directory: File Length Name/status 

1 6788464 c2800-d-1.120-4 

[6788528 bytes used, 1600080 available, 8388608 total] 
8192K bytes of processor board System flash (Read ONLY) 


The following listing for show version indicates that the router is operating ver- 
sion 12.4. Notice that the show version command also lists the amount of time that 
the router has been running. This is listed as the Router uptime. In this example the 
router has been running 41 minutes, and it indicates that the system was restarted by 
power-on. This is a good place to check when troubleshooting intermittent problems 
with a router. Recurring statements that the router was restarted by power-on could 
indicate that the router has an intermittent power supply problem or that the power to 
the router is intermittent. Another possibility is that someone is resetting the router. 
This is not common because access to the router is typically password protected. 

Router>show version 

Cisco Internetwork Operating System Software 

IOS (tm) 2800 Software (C2800-D-L), Version 12.4, RELEASE SOFTWARE (fc1) 

Copyright (c) 1986-2006 by Cisco Systems, Inc. 


Compiled Wed 14-Apr-@6 21:21 by prod_rel_team 
Image text-base: 0x@3037C88, data-base: 0x00001000 


ROM: System Bootstrap, Version 12.04(10c), SOFTWARE 
BOOTFLASH: 3000 Bootstrap Software (IGS-BOOT-R), Version 12.2(10c), 
RELEASE SOFTWARE (fc1) 


Router uptime is 41 minutes 
System restarted by power-on 
System image file is "flash:c2800-d-1.120-4" 


Cisco 2800 (68030) processor (revision N) with 2048K/2048K bytes of mem- 
ory. Processor board ID 14733315, with hardware revision 00000000 


Bridging software. 

X.25 software, Version 3.0.0. 

1 FastEthernet/IEEE 802.3 interface(s) 

2 Serial network interface(s) 

32K bytes of non-volatile configuration memory. 

8192K bytes of processor board System flash (Read ONLY) 


Configuration register is 0x42 


Router Configuration Challenge—The User EXEC Mode 


Use the Net-Challenge software included with the companion CD-ROM to complete 
this exercise. Place the disk in your computer’s CD-ROM drive. The Net-Challenge 
software is located in the Net-Challenge folder on the CD-ROM. Open the folder and 
click the Net-Challenge.exe file. The program will open on your desktop with the 
screen shown in Figure 6-15. The Net-Challenge software is based on a three-router 
campus network setting. The software allows the user to configure each of the three 
routers and to configure the network interface for computers in the LANs attached to 
each router. Connection to each router is provided by clicking one of the three router 
buttons shown in Figure 6-15. Clicking a router button connects the selected router 
to a console session, thus enabling the simulated console terminal access to all three 
routers. The routers are marked with their default hostnames of Router A, Router B, 
and Router C. This challenge tests your ability to use router commands in the user 
EXEC mode. Click the Net-Challenge.exe file to start the software. Then click the Se- 
lect Challenge button to open a list of challenges available with the software. Select 
the User EXEC Mode challenge. Selecting a challenge will open a checkbox win- 
dow, as shown in Figure 6-16. The tasks in each challenge will be checked as com- 
pleted, as appropriate. 


10.10.100.0 Het 


A əcgment 
+> yi Router A | FA0/2 Router B Router C| FA0/2 


Click on the router Router A 


button to connect to a> al Pe Rn I A 
Y "Het ` 10.10.10.0 Het 
the router’s console 


Router B 


pie 


v 


Router C 


port 





Select Challenge | About Net-Sim | 


Router conl is now available 





Press RETURN to get started! 


Connected 0:00 st 











FIGURE 6-15 The Net-Challenge screen. 
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im User EXEC Mode SEE 


Router A Selected 

Enter user EXEC mode 
Help with commands 
Exited EXEC mode 
Re-enter user EXEC mode 
Command: show ? 

Use show flash 


Use show version 


Use show history 





FIGURE 6-16 The checkbox for the User EXEC Net-Challenge software. 


1. Make sure you are connected to Router A by clicking the appropriate selection 
button. 

2. Demonstrate that you can enter the router’s user EXEC mode. The router 
screen will display Router> when you are in the user EXEC mode. 

3. Use the ? for help to see the available command options in the Net-Challenge 
simulation software. You should see that the enable, exit, and show commands 
are available from the Router> prompt. The Net-Challenge software displays 
only the available commands and options within the software. The text pro- 
vides examples of what the full command and help options look like. 

4. Enter exit from the Router> prompt (Router>exit). Where does this place you? 
You should be back at the Press RETURN screen, as shown in Figure 6-17. 

5. Reenter the user EXEC mode by pressing Return. 








Select Challenge | About Net-Sim | 





Router conl is now available 





Press RETURN to get started] 








Connected 0:00 


FIGURE 6-17 The screen that should be displayed in Step 4 after entering the exit 
command. 


6. Enter the command show after the Router> prompt (Router>show). 
This step generates an “error unknown command” message. Include a ? after 
the show command to see what options are available for show. The text dis- 
played on the terminal screen should look like Figure 6-18. 
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Select Challenge | About Net-Sim | 


Router con0 is now available 


Press RETURN to get started! 
Router> sh ? 

version 

flash 

history 
Router> 


v 
Connected 0:00 ss? 








FIGURE 6-18 The display for Step 6 using the show command. 


7. Enter the command show flash at the Router> prompt on the command line in- 
terface. Describe the information displayed. 

8. Enter the command show version at the Router> prompt on the command line 
interface. Describe the information displayed. 

9. Enter the command show history at the Router> prompt on the command line 
interface. Describe the information displayed. 


6-5 THE ROUTER’S PRIVILEGED EXEC MODE 
(ROUTER#) 


Configuring a router interface requires you to enter privileged mode on the router. 
The privileged EXEC mode allows full access for configuring the router interfaces 
and configuring a routing protocol. This section focuses on general configuration 
steps for the router and configuring the router’s interfaces, FastEthernet, and serial 
ports. Configuring routing protocols is examined in Chapter 7. 

You enter the privileged mode using the command enable at the Router> 
prompt as shown. The # sign after the router name indicates you are in the privileged 
EXEC mode (Router#). 

Router> enable 


Password: 
Router# 


Entry into the router’s privileged mode is typically password protected. The ex- 
ception to this is when a router has not been configured and a password has not been 
assigned to it. In this case, pressing Enter on the keyboard from the Router> prompt 
will place you in the router’s privileged mode (Router#). The two different steps for 
entering the router’s privileged mode are shown in Figure 6-19: (a) no password pro- 
tection and (b) password required. 

Use caution when you have entered the privileged mode in a router. It is easy 
to make mistakes, and incorrectly entered router configurations will adversely affect 
your network. This text comes with the Net-Challenge router simulator on the com- 
panion CD-ROM to help you gain experience with router configuration. In fact, most 
of the router configuration commands presented in the text can be implemented in the 
router simulator on the companion CD-ROM. Many options are available for config- 
uring the router and the router’s interfaces from the Router# prompt. This section 
presents the key options needed to configure the router. 





Privileged Mode 

Allows the router ports and 
routing features to be 
configured 


enable 
The command used to enter 
the router's privileged mode 


Router# 

The pound sign indicates 
that the user is in the 
router's privileged EXEC mode 
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router > enable 


router # 


router > enable 


password: 


router # 





(b) 


FIGURE 6-19 The steps for entering the router's privileged EXEC mode: (a) no password; 
(b) password required. 


Hostname 


configure terminal The next commands examined require that the router’s terminal configuration mode 


(conf t) be entered. To do this, enter the command configure terminal (abbreviated conf t) at 


ae einen’ EEST Me the RouterA# prompt to enter the router’s configuration mode. 
router's terminal 


configuration mode RouterA#conf t 
Enter configuration commands, one per line. End with CNTL/Z. 
RouterA(config)# 


OF 


RouterA#configure terminal 
Enter configuration commands, one per line. End with CNTL/Z. 
RouterA(config)# 


Note the change in the prompt to RouterA(config)#. This indicates that the 
router is in terminal configuration mode. 

The first router configuration option examined enables the user to assign a host- 
name to the router. The generic name or the name of an unconfigured Cisco router is 
router, and the hostname command enables the user to change the name to specifi- 
cally identify the router. For example, valid hostname structures include RouterA, 
Router-A, or Router_A, while Router A is not valid. Valid router hostnames may not 
have any spaces. The word router does not have to be used in the hostname. The host- 
name can reflect the manner in which the router is being used. For example, a router 
can serve as the network gateway for the LANs in a building; for example, for a build- 
ing named Goddard the router could be called Goddard_gate. This tells the network 
administrator the location and purpose of the router. 

In the privileged mode (Router#) enter the command hostname [router-name] 
<enter>. This sets the hostname for the router to router-name. The following exam- 
ple demonstrates how the router’s hostname is changed to RouterA. Notice the 
change with the router’s name from the first to the second line after the hostname 
command is entered. 


Router(config)# hostname RouterA 
RouterA# (config) 
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Enable Secret 


Password protection for the privileged (enable) mode is configured by setting enable 
secret. The steps are as follows: Enter the router’s configure terminal mode by en- 
tering configure terminal or conf t at the Router# prompt. Enter the command 
enable secret [your-password] <enter>. The following is an example: 

Router# conf t 


Router (config)# 
Router(config)# enable secret my-secret 


This example sets the password for entering the router’s privileged EXEC 
mode to my-secret. The password for entering the router’s privileged mode must now 
be entered to gain access to the mode. 


Setting the Line Console Passwords 


The router has three line connections through which a user may gain access to the Router(config)# 

router. The line connections available on a router can be displayed using the line ? The prompt for the router's 
command at the Router(config)# prompt. The available line connections are as fol- terminal configuration mode 
lows: 


aux Auxiliary line 
console Primary terminal line (console port) 
vty Virtual terminal (for a telnet connection) 


The console (primary terminal line) is the console port, vty is the virtual termi- 
nal used for telnet connections, and aux is used to establish an external modem con- 
nection. The following steps demonstrate how to configure password protection for 
the console port and the virtual terminal. 
The console port configuration is as follows. Enter the command line console 
0 <enter>. Next, enter the command login, press Enter, and then type the command 
password [my-secret2], where my-secret2 is the console port password. The follow- 
ing 1s an example of using these commands: 
Router(config)# line console ø 
Router (config-line)# login 
Router(config-line)# password [my-secret2] 
Note the change in the router prompt to Router(config-line)#, indicating you Router(config-line) # 
are in the router’s line configuration mode. The prompt indicating you 
Password protection for the virtual terminal (line vty) is set from the router’s are in the router's line 
configuration mode. The virtual terminal is the method for entering the router viaa configuration mode 
Telnet connection. First enter the command line vty 0 4. This places the router in the 
line configuration mode (config-line). The 0 4 represents the number of vty lines to 
which the following configuration parameters will be applied. The five virtual termi- 
nal connections are identified as 0, 1, 2, 3, and 4. Next enter the command password 
[my-secret3]. The entry my-secret3 is the password for the virtual terminal connec- 
tion. The last step is to enter login, and press Enter. 
Router(config)# line vty 6 4 


Router (config-line)# password [my-secret3] 
Router (config-line)# login 
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Router (config-if) # 
Indicates that you are in the 
router's interface 
configuration mode 


no shutdown (no shut) 
Enables a router's interface 


show ip interface brief 
(sh ip int brief) 

The command used to verify 
the status of the router's 
interfaces 


DCE 

Data Communications 
Equipment (the serial 
interface responsible for 
clocking) 


DTE 

Data Terminal Equipment 
(the serial interface 
designed for connecting to a 
CSU/DSU to outside digital 
communication services) 
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Fast Ethernet Interface Configuration 


Routers can have Ethernet (10 Mbps), Fast Ethernet (100 Mbps), gigabit Ethernet 
(1000 Mbps), and ten gigabit (10G) interfaces. These routers can have multiple in- 
terfaces supporting 10/100/1000 Mbps and 10 Gbps connections, and the steps for 
configuring each interface are basically the same. Each interface is assigned a nu- 
merical number. For example, a router could have three FastEthernet interfaces iden- 
tified as 


FastEthernet 0/0 
FastEthernet 0/1 
FastEthernet 0/2 


The following steps describe how to configure a router’s FastEthernet 0/0 port 
(FastEthernet 0/0, also listed as fa0/0 and FA0/0). In the router’s configuration mode 
[Router(config)#], enter interface fa0/0 and press Enter. This changes the router’s 
prompt to Router(config-if)#, indicating you are in the router’s interface configura- 
tion mode. The router keeps track of the interface you are configuring. The abbrevi- 
ated command int fa0/0 is used to access the FastEthernet0/0 interface. The router 
prompt will still show Router(config-if)#. Next enter the assigned IP address for the 
FastEthernet 0/0 port—for example, ip address 10.10.20.250 255.255.255.0—and 
press Enter. Next the router interface must be enabled. This is accomplished using the 
no shutdown (no shut) command. The following are the steps for configuring a 
FastEthernet interface. 

Router(config)# int fa@/@ 

Router(config-if)# ip address 10.10.20.250 255.255.255.0 

Router(config-if)#no shut 


2w0d: %SLINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/@, 
changed state to up 


Notice that the router prompts you that the line protocol on interface FastEth- 
ernet 0/0 changed state to up. Repeat the previous steps for each of the FastEthernet 
interfaces. The command show ip interface brief (sh ip int brief) entered at the en- 
able prompt (Router#) can be used to verify the status of the router interfaces. The 
following is an example: 


Router# sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet® 10.1@.20.250 YES manual up up 
FastEthernet1 10.10.200.1 YES manual up up 
FastEthernet2 10.10.100.1 YES manual up up 


Serial Interface Configuration 


The router’s serial ports are used to interface to other serial communication devices. 
The serial communications link is often used in campus networks to connect to wide 
area networks or the Internet. Configuring the serial port requires that the following 
questions be answered: 


e What is the IP address of the interface? 
e What is the subnet mask for the interface? 
e What interfaces are responsible for providing clocking? 


In the router’s serial communication links, there will be a DCE anda DTE end. 
The serial cables on older routers are called V35 cables. Examples are shown in 
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Figure 6-20. DCE stands for Data Communication Equipment and DTE stands for 
Data Terminal Equipment. The DTE interface on the V.35 cable is designed for con- 
necting the router to a CSU/DSU and outside digital communication services. In re- 
gards to clocking, the serial interface that is defined to be the DCE is responsible for 
providing clocking. (The serial communications link is examined in detail in Chap- 
ters 8 and 9.) This section shows how to check to see whether your serial connection 
is DCE or DTE. Modern routers have a built-in CSU/DSU and use an RJ-45 cable to 
establish the wide area network or Internet connection. 





FIGURE 6-20 The (a) DCE and (b) DTE ends of V.35 serial cable (courtesy of 
StarTech.com). 


From the router’s config prompt, enter the command int s0/0 to access the Se- 
rial0/0 interface. The router’s prompt changes to Router(config-if)# to indicate that 
the interface configuration has been entered. Notice this is the same prompt as when 
configuring the FastEthernet interfaces. Next configure the IP address and subnet 
mask for the serial interface by entering the command ip address 10.10.50.30 
255.255.255.0. These steps are shown as follows: 


Router(config)# int s@/6 
Router(config-if)# ip address 10.10.50.30 255.255.255.0 


If this is a serial DCE connection, you must set the clock rate. The serial con- 
nection can have either a DCE or DTE end. Routers use RJ-45 and V.35 connections 
to connect to the serial interface. In the case of V.35 cables, the DCE end of the ser- 
ial connection is defined to be the female end of the V.35 cable. The DTE end of the 
cable is defined to be the male end of the V.35 cable. The female and male ends of 
V.35 cables are shown in Figure 6-20 (a) and (b). There are three ways to check the 
cable to see if the connection is DCE or DTE. 


1. The command show controllers serial [interface number] can be used to de- 
termine whether your serial interface is a DCE or DTE interface. An abbrevi- 
ated listing of the displayed results for the show controllers serial 0 command 
is shown. The Serial0/0 interface is a V.35 DCE cable. This command should 
be used when you have an RJ-45 connection. 

2. The V.35 cables are typically labeled to indicate whether they are a DTE or 
DCE cable. 

3. Inspect the end of the V.35 cable to determine whether it is male (DTE) or fe- 
male (DCE). 


The customer is usually the DTE end, and the clock rate will be set by the 
communications carrier. The exception to this is when the customer is setting up a 
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back-to-back serial connection within their own network. In this case, the customer 
sets the clock rate. The following is an example of using the show controllers com- 
mand for a DCE interface: 

Router# sh controllers serial 0/0 

HD unit ®©, idb @xCF958, driver structure at @xD4DC8 


buffer size 1524 HD unit @, V.35 DCE cable 
cpb @x21, eda @x494@, cda @x4800 


The next example shows the results of the show controllers serial [interface 
number] for a DTE interface. This example shows that the Serial0/1 interface is be- 
ing checked. 

RouterA#sh controllers serial 6/1 

HD unit 1, idb @xD9050, driver structure at OxDE4CO 


buffer size 1524 HD unit 1, V.35 DTE cable 
cpb @x22, eda @x30A@, cda @x30B4 


The clocking for the serial interface is set using the clock rate command fol- 
lowed by a data rate. The clock rate for the serial interface on the router can be set 
from 1200 bps to 4 Mbps. The following is the command for setting the clock rate to 
56000: 


Router(config-if)# clock rate 56000 


Next the serial interface must be enabled using the no shut command. The 
router prompts the console port that interface Serial 0/0 changed state to up. These 
steps are repeated for all the serial interfaces. 

Router(config-if)# no shut 

2w@d: %SLINK-3-UPDOWN: Interface Serial@/0, changed state to up 


2w@d: %SLINEPROTO-5-UPDOWN: Line protocol on Interface Serial@/®, changed 
state to up 


The status of the serial interfaces can be checked using the sh ip int brief com- 
mand as shown. Section 6-6 explains the meaning of all the information displayed us- 
ing the sh ip int brief command. 


Router# sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet® 10.10.20.250 YES manual up up 
FastEthernet1 10.10.200.1 YES manual up up 
FastEthernet2 10.10.100.1 YES manual up up 
Serial@ 10.10.128.1 YES manual up up 
Serial 10.10.64.1 YES manual up up 


Router Configuration Challenge—The Privileged EXEC Mode 


Use the Net-Challenge software included with the companion CD-ROM to complete 
this exercise. Place the CD-ROM in your computer’s drive. The software is located 
in the NetChallenge folder on the CD-ROM. Open the folder and click the NetChal- 
lenge.exe file. The program will open on your desktop with the screen shown in Fig- 
ure 6-15. The Net-Challenge software is based on a three-router campus network 
setting. The software allows the user to configure each of the three routers and to con- 
figure the network interface for computers in the LANs attached to each router. 
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Connection to each router is provided by clicking one of the three router buttons 
shown in Figure 6-15. Clicking a button connects the selected router to a terminal 
console session, enabling the simulated console terminal access to all three routers. 
The routers are marked with their default hostnames of Router A, Router B, and 
Router C. This challenge tests your ability to use router commands in the privileged 
EXEC mode, also called the enable mode. Click the Net-Challenge.exe file to start 
the software. Next, click the Select Challenge button to open a list of challenges 
available with the software. Select the Chapter 6 Privileged EXEC Mode challenge 
to open a checkbox screen. Each challenge will be checked when the task has been 
successfully completed. 


L. 


ai 


oe ee 


10. 


11. 


12. 


Make sure you are connected to Router A by clicking the appropriate selection 
button. 

Demonstrate that you can enter the router’s privileged EXEC mode. The router 
screen should display Router#. The password is Chile. 

Place the router in the terminal configuration mode [Router(config)#]. 

Use the hostname command to change the router hostname to RouterA. 

Set the enable secret for the router to Chile. 

Set the vty password to ConCarne. 

Configure the three FastEthernet interfaces on RouterA as follows: 


FastEthernet0/O (fa0/0) 10.10.20.250 255.255.255.0 
FastEthernet0/1 (fa0/1) 10.10.200.1 255.255.255.0 


FastEthernet0/2 (fa0/2) 10.10.100.1 255.255.255.0 


Enable each of the router FastEthernet interfaces using the no shut command. 
Use the sh ip int brief command to verify that the interfaces have been config- 
ured and are functioning. For this challenge, the interfaces on Router B and 
Router C have already been configured. 

Configure the serial interfaces on the router. Serial interface 0/0 is the DCE. 
The clock rate should be set to 56000. The IP addresses and subnet masks are 
as follows: (Note: Use clock rate.) 


Serial 0/O 10.10.128.1 255.255.255.0 


Serial 0/1 10.10.64.1 255.255.255.0 


Use the sh ip int brief command to verify that the serial interfaces are properly 
configured. For this challenge, the interfaces on Router B and Router C have 
already been configured. 

Use the ping command to verify that you have a network connection for the fol- 
lowing interfaces: 


RouterA FA0/1 (10.10.200.1) to RouterB FAO/2 (10.10.200.2) 


RouterA FA0/2 (10.10.100.1) to RouterC FAO/2 (10.10.100.2) 


6-6 TROUBLESHOOTING THE ROUTER INTERFACE 


This section examines one of the most commonly used router commands for trou- 
bleshooting and isolating problems that might be related to the router configuration 
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and router interfaces. The command is show ip interface brief (sh ip int brief). Typ- 
ically, the network administrator will be able to telnet into the router to establish a vir- 
tual terminal connection. The virtual terminal enables the administrator to connect to 
the router without physically plugging in to it. The onscreen appearance of the vir- 
tual terminal connection will appear the same as the console port connection. Re- 
member, the virtual interface is password protected and only authorized users can 
access the router through this interface. 

The first step is to check the status of the interfaces and verify that the inter- 
faces are attached to another networking device using the sh ip int brief command. 
The command provides a quick look at information about the interfaces, such as the 
following: 


Interface The type of interface: 
Ethernet: 10 Mbps 
Fast Ethernet: 100 Mbps 
Gigabit Ethernet: 1000 Mbps 


Serial: 2500 bps to 4 Mbps and higher for high-speed serial 
interfaces 


IP-Address The IP address assigned to the interface 
OK? Indicates whether the interface is functioning 


Method “How the interface was brought up” (for example, manual, 
tftp) 


Status {current router status “up”, “down” or “administratively 
down’’} 


Line Protocol displayed results differ for FastEthernet and the 
Serial interfaces. For FastEthernet, status “up” indicates that 
the FastEthernet interface has been administratively brought up. 


Keepalive Packet Protocol The protocol “up” indicates that you are seeing the Keepalive 

Indicates that the Ethernet packet. Keepalive indicates that the FastEthernet interface is 

interface is connected to connected to another networking device such as a hub, switch, 

another networking device or router. A protocol status of “down” indicates that the Ether- 

such as a hub, switch, or net port is not physically connected to another network device. 

router This is not the same as the link integrity pulse that activates the 
link light. The link integrity pulse does not send out a small 
Ethernet packet; Keepalive sends out such a packet. 


The following demonstrates how sh ip int brief can be used to check the status 
of the interfaces for different conditions such as status down, status up/protocol down, 
and status/protocol down. This includes examples of how to interpret the results dis- 
played by the sh ip int brief command. This is of particular importance when trou- 
bleshooting a possible cable or link failure. When a FastEthernet interface cable is not 
attached or the link is broken, the protocol shows “down.” If a serial interface cable 
is not attached or the link is broken, the status and the protocol both show “down.” 

The following are text outputs from a Cisco router that demonstrate how the 
router status and protocol settings change based on the interface configuration and 
setup. The first text displays that the three Ethernet interfaces and two serial inter- 
faces are properly configured. The status “up” means that the interface has been ad- 
ministratively turned on by the network administrator. 
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sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES manual up up 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 
SerialQ@/Q 10.10.128.1 YES manual up up 
Serial@/1 10.10.64. 1 YES manual up up 


The next example demonstrates that the router provides a prompt if the link be- 
tween the router’s FastEthernetO/O interface and another networking device is lost. 
Within a few seconds of losing the link, the prompt shown appears: 


2w0d: %SLINEPROTO-5-UPDOWN: Line protocol on Interface 
FastEthernet0/@, changed state to down 


The sh ip int brief command shows that the protocol for FastEthernet0/0 is 
“down” and the status is still “up,” meaning the interface is still enabled but the router 
is not communicating with another networking device such as a hub, switch, or router. 
Therefore, the protocol “down” condition for the FastEthernet interface, as viewed by 
the sh ip int brief command, indicates that there is a loss of communications between 
the router and a connected networking device. You might have to physically check the 
router’s FastEthernet interface for a link light. In this example, a link light check on 
the router showed that there was not a link and in fact, the RJ-45 plug connected to 
the router had come loose. 


RouterA#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet®0/0 10.10.20.250 YES manual up down 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 
Serial@/Q 10.10.128.1 YES manual up up 
Serial@/1 10.10.64. 1 YES manual up up 


Reconnecting the RF-45 cable reestablishes the link for the FastEthernet0/0 in- 
terface and the networking device. The router provides a prompt that the FastEther- 
netO/O line protocol has changed state to “up.” The sh ip int brief command now 
shows that all interface status is “up” and protocol is “up.” 

2w0d: %SLINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet0/Q, 


changed state to up 
RouterA#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES manual up up 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 
Serial@/Q 10.10.128.1 YES manual up up 
Serial@/1 10.10.64. 1 YES manual up up 


The router’s serial ports behave differently than the FastEthernet interfaces, as 
shown with the following examples. The previous router text display using the sh ip 
int brief command shows that the Serial0/O interface status is “up” and the protocol 
is “up.” If the serial link is lost or disconnected, the interface goes down and a prompt 
is sent to the console screen as shown. The prompt advises the administrator that the 
Serial0/0 interface has changed state to “down” and the line protocol for Serial0/0 is 
also “down.” The sh ip int brief command now shows that the status and line proto- 
col for SerialO/O are “down.” 

2w0d: %SLINK-3-UPDOWN: Interface Serial@/®, changed state to down 


2w@d: %SLINEPROTO-5-UPDOWN: Line protocol on Interface Serial@/®, changed 
state to down 
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RouterA#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES manual up up 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 
Seriald/Q 10.10.128.1 YES manual down down 
Serial /1 10.10.64. 1 YES manual up up 


Reestablishing the serial connection will change the status back to “up” and the 
protocol back to “up” as shown. Note that the prompt includes a statement that com- 
munication to 10.10.128.2 has been resumed. This is the IP address of the serial in- 
terface attached to the router’s SerialO interface. 

2w@d: %SLINK-3-UPDOWN: Interface Serial®@, changed state to up 

2w@d: %SLINEPROTO-5-UPDOWN: Line protocol on Interface Serial@, changed 

state to up 


[Resuming connection 1 to 10.10.128.2 ... ] 
RouterA#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES manual up up 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 
Seriald/Q 10.10.128.1 YES manual up up 
Serial1Q/1 10.10.64. 1 YES manual up up 
Administratively Down This screen shows that the Serial0 interface is “administratively down.” The 
Indicates that the router term administratively down indicates that the router interface has been shut off by 
interface has been shut off the administrator. Note the difference with the terms down and administratively 
by the administrator down. Reissuing the command no shut for the Serial0/0 interface should correct the 
problem. 
RouterA#sh ip int brief 
Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES manual up up 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 
Seriald/Q 10.10.128.1 YES manual administratively down up 
SerialO/1 10.10.64.1 YES manual up up 


This section has presented the sh ip int brief command and how it can be used 
to troubleshoot and isolate router interface problems. The status differs for the Eth- 
ernet and serial interfaces. This is an important concept and something you will en- 
counter when working with routers. 
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SUMMARY 


This chapter presented an overview of routers, a technique for establishing a console 
port connection, and the basic steps for configuring the router’s interface. The student 
should understand the difference in the router’s user and privileged EXEC modes. A 
list of the router prompts encountered in this chapter appears in Table 6-4. 


TABLE 6-4 Router Prompts and Their Definitions 


Prompt Definition 

Router> User EXEC mode 

Router# Privileged EXEC 

mode Router(config)# Configuration mode 
Router(config-if)# Interface configuration mode 
Router(config-line)# Line terminal configuration mode 


The student should understand and be able to demonstrate the steps for config- 
uring the Ethernet and serial interfaces. These concepts are used repeatedly in the 
next chapters. A new router troubleshooting command (sh ip int brief) was added to 
the list of networking troubleshooting steps. The student should make sure the con- 
cepts discussed in section 6-6 are well understood. This command is very useful for 
troubleshooting and isolating router problems. 


QUESTIONS AND PROBLEMS 


Section 6-1 


1. What is the command line interface used for on a Cisco router? 
2. Define Cisco IOS. 


Section 6-2 


3. Define a broadcast domain. 

What is a flat network? 

What is a layer 3 network? 

Define the purpose of a gateway. 

Where is the default gateway address assigned on Windows? 

A computer with a host IP address of 10.10.5.1 sends a data packet with a des- 

tination IP address of 10.10.5.2. A subnet mask of 255.255.255.0 is being used. 

Determine whether the packet stays in the LAN or is sent to the gateway. Show 

your work. 

9. Repeat problem 8 if the destination IP address for the data packet is 10.5.10.2. 

The subnet mask is still the same. Show your work. 

10. Repeat problem 9 if the subnet mask is changed to 255.0.0.0. Show your work. 

11. Repeat problem 9 if the subnet mask is changed to 255.255.0.0. Show your 
work. 
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12. The IP address for computer C2 is 10.10.1.2. The IP address for computer B1 
is 10.10.10.1. A subnet mask of 255.255.0.0 is being used. Are the computers 
in the same network? Show your work. 

13. Determine the router hop count from Router A to Router D in the network 
shown in Figure 6-21 for the route with the fewest hops. 





RouterA RouterB RouterE 


RouterC RouterD 


FIGURE 6-21 Network Topology for Problem 13. 


14. List all the possible routes from Router B to Router D in the network shown in 
problem 13. 

15. What subnets are attached to Router B in Figure 6-21? 

16. List the subnets attached to Router C in Figure 6-21. 

17. What is the next hop address for FastEthernet port 1, Router A in Figure 6-21? 

18. What is the next hop address for the FastEthernet port 2, Router C in Fig- 
ure 6-21? 
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19. What is a rollover cable? 
20. What values are used when configuring HyperTerminal for connecting to a 
Cisco router’s console port? 





Section 6-4 


21. What command is used to find out the version of the IOS running on a Cisco 
router? Show the prompt and the command. 

22. What is the help command in Cisco IOS? 

23. What command can be used to see the uptime for a router? 

24. What command is used to verify that there is sufficient memory available to 
load a new version of the Cisco IOS software? 

25. What is the router prompt for the user EXEC mode? 

26. If you enter exit from the Router> prompt, where does it place you? 


Section 6-5 


27. What is the router prompt for the privileged EXEC mode? 
28. What command is used to enter the router’s privileged mode? 
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29. What command is used to configure a router’s hostname to Tech-router? 

30. What command is used to enter the router’s terminal configuration mode? 

31. What is the router prompt for the terminal configuration mode? 

32. What is the command for setting password protection for the privileged mode? 
The password is Tech. 

33. What does the command line vty 0 4 mean? 

34. Describe the steps to configure and enable a FastEthernetO/1 router interface 
with the IP address 10.10.20.250 and a subnet mask of 255.255.0.0. 

35. What is the best command to view the router interface status and protocol? 

36. Is clocking of a router’s serial interface set by the DCE or the DTE? 

37. What are the three ways to see if your router’s serial port is a DCE or DTE end? 

38. What command is used to set the data speed on a router’s serial port to 56 kbps? 

39. What is the router prompt for the interface configuration mode? 
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40. What is the purpose of the Keepalive packet? 

41. The sh ip int brief command indicated that the protocol for a FastEthernet in- 
terface is “down.” What does this mean? 

42. What is the difference in a serial interface with a status of down and a status of 
administratively down? 


Critical Thinking 


43. What does the command line vty 0 1 mean? 

44. How can you check to see if the FastEthernet interface on a router is connected 
to the FastEthernet interface on another networking device? 

45. You suspect that a router’s LAN gateway is down. Describe how you would 
troubleshoot the problem. 
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OBJECTIVES 
e Describe the difference between static and e Understand the basics of configuring a 
dynamic routing protocols Juniper router 
e Describe the difference in distance vector and e Understand the purpose of and be able to con- 
link state protocols figure a TFTP sever 
e Be able to configure a basic setup for static, e Use the Surveyor Demo software to capture 


RIP, IGRP, OSPF, and EIGRP routing 


protocols 


and analyze the OSPF “Hello” packets 


e Describe the purpose of the “Hello” packet 


e Understand the relative amount of traffic gen- 


erated by each protocol 


KEY TERMS 


static route 

netstat -r 

route print 

loopback 

ip route 

variable length subnet 
masking 

show ip route (sh ip route) 
routing table code S 
routing table code C 
gateway of last resort 
show ip route static (sh ip 
route static) 

show running-config (sh 
run) 


show startup-config (sh 
start) 


copy run start 

write memory (wr m) 
dynamic routing protocols 
path determination 
metric 

convergence 

load balancing 

hop count 

reliability 

bandwidth 

delay 

cost 

load 


ticks 

distance vector protocol 
link state protocol 

RIP 

routing loop 

advertise 

class network address 
classful addressing 


show ip protocol (sh ip 
protocol) 


IGRP 

holddowns 

split horizons 
administrative distance 
router igrp [AS number] 


continues 
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KEY TE RMS continued 


autonomous system 
(AS) 
classful network 


Router(config- 
router)# 


show ip route igrp 
(sh ip route igrp) 
OSPF 

IETF 


link state advertise- 
ment (LSA) 


“Hello” packets 
areas 
backbone 
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variable length sub- 
masks (VLSM) 


route flapping 


router ospf [num- 
ber] 


network number 
wild card bits 
area 0 

EIGRP 

JUNOS 

{master} 

reO { andrel { ... 
PIC 


Permanent inter- 
faces 


Management 
Ethernet interfaces 


Internal Internet in- 
terfaces 


Transient interfaces 
commit 

commit and- quit 
TFTP 

network mask 
hello interval 
router dead interval 
RID 

OSPFIGP 

IGP 


7-1 INTRODUCTION 


This chapter introduces the basic concepts of routing protocols. Routing protocols 
provide a standardized format for route management including route selection, shar- 
ing route status with neighbor routers, and calculating alternative routes if the best- 
path route is down. The focus of this chapter is on the use of routing protocols in a 
campus network environment. 

Static routing protocols are presented in section 7-2. This section includes ex- 
amples of how to configure static routes and view the routes in a routing table. The 
material includes a discussion of when and where static protocols are used and also 
when and why it is not advantageous to use a static routing protocol. An overview of 
the concept of dynamic protocols is presented in section 7-3. Dynamic protocols are 
divided into two areas, distance vector and link state. Examples of configuring the 
distance vector protocols RIP and IGRP are presented in sections 7-4 and 7-5. Con- 
figuring the link state protocol OSPF is examined in section 7-6, and the steps for 
configuring the distance vector protocol EIGRP are examined in section 7-7. Section 
7-8 examines the steps for configuring a Juniper router. The configuration commands 
are similar but there are some distinct differences with the JUNOS operating system. 
It is important to periodically back up the router configuration files. A procedure for 
doing this is by using a Trivial File Transfer Protocol (TFTP) server, and this topic is 
examined in section 7-9. Section 7-10 examines the OSPF “Hello” packets used by 
routers to initiate and maintain communication with neighbor routers. The parame- 
ters of the “Hello” packet are examined using the Surveyor Demo protocol analyzer. 

Each routing protocol section in this chapter contains a networking challenge 
that is included with the Net-Challenge companion CD-ROM. These challenges en- 
able you to configure each routing protocol on a virtual router. 


7-2 STATIC ROUTING 


The objective of this section is to demonstrate how data packets are routed ina net- Static Route 
work using a static routing protocol. The techniques for configuring static routes so A data traffic route that has 
that data packets can be forwarded are presented. A static route is a list of IP ad- Peen manually entered into 
dresses to which data traffic can be forwarded and has been manually entered into e1- Een 2 cures ae 
ther a router’s or computer’s routing table. A static route is specified in a PC computer computer Pv UENG taie 
in terms of the computer’s default gateway, and routers sometimes use a static route 
when specifying where the network data traffic is to be forwarded. Examples of spec- 
ifying the static route(s) for a computer are first examined. 
The most common static route used in a host computer is the default gateway. 
The default gateway specifies where the data traffic 1s to be sent when the destination 
address for the data is not in the same LAN or is unknown. If you don’t have a route 
specified for a subnet in your network, the default route is used. For example, if your 
PC is on the 10.10.0.0 network and it wants to send data to 100.100.20.1, the data is 
sent to the default gateway as specified by the TCP/IP setup on your PC. An example 
of setting the host computer’s default gateway is shown in Figure 7-1 for both (a) 
Windows Vista and (b) Mac OS X. In this example, the default IP address is 
10.10.20.250 with a subnet mask of 255.255.255.0 for the computer in LAN A with 
the IP address of 10.10.20.1. 
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netstat -r 

The command used to obtain 
the routing table for a host 
PC computer 


route print 
Produces same displayed 
result as netstat -r 


Loopback 
The data is routed directly 
back to the source 
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Internet Protocol Version 4 (TCP/IPv4) Properties 





General 








You can get IP settings assigned automatically if your network supports 
this capability. Otherwise, you need to ask your network administrator 
for the appropriate IP settings. 


® Obtain an IP address automatically (a) 
@ Use the following IP address: 

IP address: 10 . 10 . 20 . 1 
255 . 255 . 255. 0 


Subnet mask: 


Default gateway: 10 . 10 . 20 . 250 (b) 


Obtain DNS server address automatically 


i ÅBeBAn Bip beret EY 
@ Use the following DNS server addresses: | | 


| ' ' i | z = a © = 


Preferred DNS server: = 
iyi awad Hitro Hatip irk 


Alternate DNS server: 


Letation: Location (1 LF 2S/07 Sla Pay a 


Shee: | Built-in Ethers z | 








[Tce rp (PoE  AppeTalk | Proxies Ethernet 








Configure IPt: Manually i E 

















iP Addreii; 16.10.20.) 
Subnet Mark: 255.255.255.0 


Bowler: | 10. 10-70.750) 


FIGURE 7-1 Setting the default gateway address or default static route on the host 
computer (PC and Mac OS X). 


The routing tables for the host PC computer can be obtained by entering the 
command netstat -r at the PC’s command prompt and from the Mac OS X terminal 
screen. An example is shown in Figure 7-2 (a). The command route print can also be 
used to view the active routes from the host PC, as shown in Figure 7-2 (b). 

The default route is specified in the routing table by a 0.0.0.0 network address 
entry with a subnet mask of 0.0.0.0. The gateway address of 10.10.20.250 is the IP 
address of the FastEthernet port of the router connected to the LAN. The IP address 
of 10.10.20.1 for the interface is the IP address for the host computer’s network in- 
terface card (NIC). The network destination of 10.10.20.0 is returned to the com- 
puter’s NIC at IP address 10.10.20.1. The gateway for the network destination of 
10.10.20.1 1s 127.0.0.1, which is a loopback to the host computer. A loopback means 
the data is routed directly back to the source. In this case, the source is the computer’s 
NIC. The loopback can be used to check whether the network interface is working; if 
it is, pinging IP address 127.0.0.1 will generate a reply. 

What about setting static routes for a router in a small campus network? First, 
let’s examine how data packets travel from one LAN to another in the three-router 
campus network shown in Figure 7-3. Specifically, how is information sent from a 
host computer in LAN A (10.10.20.0 subnet) to a host computer in LAN B 
(10.10.10.0 subnet)? The data packets must travel from LAN A to the RouterA gate- 
way (FAO/0 interface), from RouterA to RouterB via the 10.10.200.0 subnet, and then 
to LAN B via the RouterB gateway (FAO/O interface). This requires that a physical 
communications link be established between the routers and a routing protocol de- 
fined for Routers A and B before data packets can be exchanged. The physical con- 
nection will typically be CAT6/Se UTP or a fiber connection. 
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C:\netstat -r 


Route Table 


Interface List 


OZI ee ee ee ee ee ee ee ee ee ee MS TCP Loopback interface 
0x2 «2000 bO d0 25 bf 48 s... 3Com 3C920 Integrated Fast Ethernet Controller 
3C905C-TX Compatible) — Packet Scheduler Miniport 


Active Routes: 


Network Destination Netmask Gateway Interface Metric 
0.0.0.0 0.0.0.0 110.10.20.250 10.10.20.1 20 
10.10.20.0 255.255.255.0 10.10.20.1 10.10.20.1 20 
10.10.20.1 255.255.255.255 127.0.0.1 127.0.0.1 20 
10,255.255,255 255.255.255.255 10.10.20.1 10.10.20.1 20 
127.0.0.0 255,00. 0 127.0.0.1 127.0.0.1 1 
224.0.0.0 240.0.0.0 10.10.20.1 10.10.20.1 20 
255.255.255.255 255.255.255.255 10.10.20.1 10.10.20.1 1 
Default Gateway: 10.10.20.250 
Persistent Routes: 
None 
(a) 
C:\route print 
Interface List 
OXI serso Sees Bie eee ree ke a we Se a Se MS TCP Loopback interface 
O22 ...00 bO d0 25 bf 48 sse. 3Com 3C920 Integrated Fast Ethernet Controller 
3C905C-TX Compatible) — Packet Scheduler Miniport 
Active Routes: 
Network Destination Netmask Gateway Interface Metric 
0.0.0.0 0.0.0.0 10.10.20.250 10.10.20.1 20 
10.10.20.0 255.255.255.0 10.10.20.1 10.10.20.1 20 
10.10.20.1 255425502 990255 127.0.0.1 127.0.0.1 20 
10.255.255.255 255.255.255.255 10.10.20.1 10.10.20.1 20 
127.0.0.0 255.0.0.0 127.0.0.1 127.0.0.1 1 
224.0.0.0 240.0.0.0 10.10.20.1 10.10.20.1 20 
255.255.255.255 255.255.255.255 10.10.20.1 10.10.20.1 1 


Default Gateway: 


10.10.20.250 


Persistent Routes: 
None 


FIGURE 7-2 (a) A host computer's static route listing obtained using the netstat -r 
command; (b) a host computer's static route listing obtained using the route print 
command. 


A simplified network can be used to demonstrate what is required to develop 
static routes in a multiple-router network. For this example, two routers from the cam- 
pus network are used. The two routers, RouterA and RouterB, connect to LANs A 
and B as shown in Figure 7-4. This simplified network will be used to describe how 
data packets travel from LAN A—RouterA—RouterB—LAN B and what is required 
to define the static routes. 
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Router A Port Addresses (LAN A Router B Port Addresses (LAN B Router B Port Addresses (LAN C 


FastEthernet 0/0 
(Gateway Address) 

FastEthernet 0/1 

FastEthernet 0/2 


10.10.20.250 | FastEthernet 0/0 
(Gateway Address) 
FastEthernet 0/2 


FastEthernet 0/3 


10.10.10.250 | FastEthernet 0/1 
(Gateway Address) 
FastEthernet 0/2 


FastEthernet 0/3 


10.10.1.250 


10.10.200.1 
10.10.100.1 


10.10.200.2 
10.10.150.1 


10.10.200.2 
10.10.150.1 
LAN C Computers 


Computer C1 
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FIGURE 7-3 A three-router campus network. 
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FIGURE 7-4 A simplified two-router network. 
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The data packets pass through three subnets (indicated by NET) when traveling 
from LAN A to LAN B. The IP subnets for each network are as follows: 


10.10.20.0 NET LANA 
10.10.200.0 NET  RouterA connection to RouterB 
10.10.10.0 NET LAN B 


In this network, there are only two routers, with RouterA directly connected to ip route 
RouterB. This means that the only route between the routers is via the 10.10.200.0 The router configuration 
NET, which is the connection between Routers A and B. The static route information command for manually 
is entered from the router’s configure terminal prompt (config)# using the ip route setting the next hop IP 
command. The command structure for ip route is address 


Router(config)#ip route <destination> <subnet mask> <next hop> 
where the destination is the network’s destination IP address (NET), the sub- 
net mask is what has been defined for the subnets, and the next hop is the IP address 


of the next router in the link. The command for routing the data to the 10.10.10.0 sub- 
net is as follows: 


RouterA(config)#ip route 16.10.10.6 255.255.255.0 10.10.200.2 


The following configuration information is entered into RouterA: 


Destination Subnet IP Next Hop IP 
Address Subnet Mask Address 
10.10.10.0 255.255.255.0 10.10.200.2 


The next hop IP address is the IP address of the Ethernet2 port on RouterB. Variable Length Subnet 
Now the router knows how to deliver data packets from host computers in the Masking 
10.10.20.0 NET (LAN A) to destination computers in the 10.10.10.0 NET (LAN B). Routes can be configured 
(Note: Each static route can use a different subnet mask. This is called variable using different subnet masks 
length subnet masking. For example, one static route could have a subnet mask of 
255.255.255.0 and another could have a subnet mask of 255.255.255.252.) 

The routing address entry into the routing table can be verified by entering the show ip route (sh ip 
command show ip route (sh ip route) from the router’s (config)# prompt. An exam- route) 


ple of this is shown: The command that displays 
the routes and the routing 


RouterA#show ip route : 
address entry into the 


Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX ; 
EIGRP external, O OSPF, IA OSPF inter area routing table 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 2 subnets 

S 10.10.10.0 [1/0] via 10.10.200.2 

C 10.10.200.0 is directly connected, FastEthernett1 


What about data traffic flow from the 10.10.10.0 NET (LAN B) to the 
10.10.20.0 NET (LAN A)? Once again, the data packets pass through three subnets 
(indicated by NET) when traveling from LAN B to LAN A. The IP addresses for each 
subnet are as follows: 


10.10.10.0 NET LAN B 
10.10.200.0 NET RouterB connection to RouterA 
10.10.20.0 NET LANA 
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In this scenario, LAN B connects directly to RouterB and the only route to LAN 
A from RouterB 1s via the 10.10.200.0 NET, which is the connection between Routers 
B and A. The destination network IP address is 10.10.20.0. The command input to 
RouterB for routing the data to the 10.10.20.0 subnet is as follows: 


RouterB(config)#ip route 10.1@.20.@ 255.255.255.0 10.10.200.1 
The following information is entered into the router: 


Destination Subnet IP Address Subnet Mask Next Hop IP Address 
10.10.20.0 255.255.255.0  10.10.200.1 


The next hop IP address is the IP address of the FastEthernet0/1 port on 
RouterA. Now a static route has been configured on RouterB to route data packets 
from host computers in the 10.10.10.0 NET (LAN B) to destination computers in the 
10.10.20.0 NET (LAN A). The entries into RouterB’s routing table can be confirmed 
by using the command sh ip route at the Router# prompt, as shown: 


RouterB#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

Ni OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 2 subnets 

S 10.10.20.0 [1/0] via 10.10.200.1 

C 10.10.200.@ is directly connected, FastEthernet0/2 


routing table code S The sh ip route command lists a table of codes first, followed by the routes. 
The router code for a static This listing shows a static route (S) 10.10.20.0 via 10.10.200.1, which indicates that 
route a static route to the destination 10.10.20.0 subnet can be reached via the next hop of 
routing table code C 10.10.200.1. The C indicates that the 10.10.200.0 network is directly connected to the 
The router code for FastEthernet02 port. 

specifying a directly This simplified network has only one route; therefore, the entries for the static 
connected network routes using the ip route command are limited but were required for each router. Sta- 


tic routes are sometimes used when configuring the routers for routing in a small net- 
work. Static routing is not the best choice, as we will learn, but it can be suitable if 
the network is small (for example, the two-router network). It can be suitable for sit- 
uations in which there is only one route to the destination, such as a wide area net- 
work or Internet feed. This concept is examined in Chapter 8. 

What about using static routes in the three-router campus network shown in 
Figure 7-3? A computer in LAN A (10.10.20.0 NET) sends data to a computer in 
LAN B (10.10.10.0 NET). This is the same requirement specified in the two-router 
network example. Once again, a static route must be entered into RouterA’s routing 
table telling the router how to forward data to the 10.10.10.0 NET. However, in this 
example there are two possible choices for a data packet to travel to the 10.10.10.0 
NET from RouterA. The IP addresses for the two possible next hops are 10.10.200.2 
and 10.10.100.2. The following are the router commands: 


RouterA(config)#ip route 10.10.10.0 255.255.255.0 10.10.200.2 
RouterA(config)#ip route 10.10.10.0 255.255.255.0 10.10.100.2 
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What about sending information from LAN A to LAN C or to LAN D? This re- 
quires four more additional ip route entries into the router’s routing table, as shown: 


RouterA(config 
RouterA(config 
RouterA(config 
RouterA(config 


#ip route 10.16.1.0 255.255.255.0 10.10.206.2 
#ip route 10.16.1.0 255.255.255.0 10.10.100.2 
#ip route 10.16.5.0 255.255.255.0 10.10.206.2 
#ip route 10.16.5.0 255.255.255.0 10.10.106.2 


Åq u e S 


But wait, we aren’t done. We must enter return static routes for all the LANs 
back to LAN A, and then enter the static routes for the other three LANs. For trou- 
bleshooting purposes, we want to be able to ping all the Ethernet interfaces on the 
subnets, so we need to add static IP routes to each subnet (NET). For example, defin- 
ing a route to the 10.10.150.0 NET, the following are the static IP route entries: 


RouterA(config)#ip route 10.10.150.0 255.255.255.0 16.10.200.2 
RouterA(config)#ip route 10.10.150.0 255.255.255.0 16.10.100.2 


This means that many static route entries must be made for the routes in this 
network to be completely defined. This requires a lot of time and if routes change in 
the network, new static entries must be made and old static routes must be deleted. 
The problem with using a static routing protocol in your network is the amount of 
maintenance required by the network administrator just to keep the route selections 
up to date in a large network. Assume that the network connection uses five router 
hops. The entries for the static routes on each router are numerous, and if the routes 
change, the routing tables in all routers must be manually updated to account for the 
data path changes. 

When static routes are used, the network administrator in essence becomes the 
routing protocol. In other words, the network administrator is making all the deci- 
sions regarding data traffic routing. This requires the administrator to know all net- 
work data routes, set up the routes to each subnet, and be constantly aware of any 
route changes. This is in contrast to dynamic routing protocols that communicate 
routing information between the routers to determine the best route to use to forward 
the data packets. The concept of a dynamic routing protocol is introduced in section 
7-3, and in subsequent sections we examine examples of the dynamic routing proto- 
cols RIP, IGRP, OSPF, and EIGRP. 


Gateway of Last Resort 


One of the most important applications for using a static route is for configuring the Gateway of last resort 
gateway of last resort on a router. The gateway of last resort is the IP address of the The IP address of the router 
router in your network where data packets with unknown routes should be forwarded. in your network where data 
The purpose of this is to configure a route for data packets that do not have a desti- packets with unknown routes 
nation route configured in the routing table. In this case, a default route can be con- Should be forwarded 

figured that instructs the router to forward the data packet(s) with an unknown route 

to another router. The command for doing this is 


ip route 0.0.0.0 0.0.0.0 <next hop address> 


If this static route has not been configured, the router will display the follow- 
ing message when the show ip route command is entered: 
Gateway of last resort is not set 


This means the router does not know how to route a data packet with a desti- 
nation IP address that differs from the routes stored in the routing table. 
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Configuring Static Routes 


The following discussion describes how to configure static routes on a Cisco router. 
The topology being used is the three-router campus network shown in Figure 7-3. 
This demonstration is for configuring the static routes for RouterA only. 

The first step is to connect to the router via a console or virtual terminal con- 
nection. Next, enter the privileged EXEC mode as shown: 

Router con® is now available Press RETURN to get started! 


RouterA>en 
RouterA# 


Next, enter the configure terminal mode on the router [RouterA(config)#] us- 
ing the configure terminal (conf t) command. Before configuring the static routes, 
make sure the interfaces are configured. The FastEthernetO/1 interface is configured 
with the assigned IP address of 10.10.200.1 and a subnet mask of 255.255.255.0, and 
the FastEthernetO/2 interface is assigned the 10.10.100.1 IP address and a subnet 
mask of 255.255.255.0. The no shut command is used to enable the FastEthernet 
ports. 

Router#conf t 

Enter configuration commands, one per line. End with CNTL/Z. 

Router(config)#int fa@/1 

Router(config-if)#ip address 10.10.200.1 255.255.255.0 

Router(config-if)#no shut 

00:19:07: SLINK-3-UPDOWN: Interface FastEthernet®@/1, changed state to up 

Router(config)#int faQ0/2 

Router(config-if)#ip address 10.10.100.1 255.255.255.0 


Router(config-if)#no shut 
00:21:05: %SLINK-3-UPDOWN: Interface FastEthernet0/2, changed state to up 


Notice that the FastEthernetO/1 and FastEthernet0/2 interfaces change state to 
up after the no shut command is issued. It is good to verify the interface status using 
the show ip interface brief (sh ip int brief) command as shown. 


RouterA#sh ip int brief 
00:22:18: %SYS-5-CONFIG I: Configured from console 


Interface IP-Address OK? Method Status Protocol 
FastEthernetQ/ 1 10.10.200.1 YES manual up down 
FastEthernet®/2 10.10.100.1 YES manual up down 


The status for both FastEthernet ports show that they are up; however, the line 
protocol down tells us there is not a physical connection established between the 
routers. Refer to section 6-6 for a review of the results displayed by status and proto- 
col. This problem with the “protocol down” is fixed by reestablishing the physical 
connection between the routers. 

The static routes are entered using the ip route command after the interfaces are 
configured. You don’t have to enter all routes at once, but all routes must be properly 
entered for the network to work. Only the routes to the 10.10.10.0 NET have been 
listed to shorten the example. 


RouterA(config)#ip route 10.10.10.0 255.255.255.0 10.10.200.2 
RouterA(config)#ip route 10.10.10.0 255.255.255.0 10.10.100.2 


show ip route static (sh There are two places to verify whether the static routes are properly configured. 
ip route static) First, verify that the routes are in the routing table using either the show ip route or 
Limits the routes displayed the show ip route static (sh ip route static) command. Adding the word static after 
to only static show ip route limits the routes displayed to only static. An important note is that the 


routes are displayed using the show ip route command only if the line protocol is up. 
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RouterA#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

Ni OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 2 subnets 

S 10.10.10.0 [1/0] via 10.10.200.2 

S 10.10.10.0 [1/0] via 10.10.100.2 

C 10.10.200.@ is directly connected, FastEthernetQ/1 

C 10.10.100.@ is directly connected, FastEthernet0/2 


The command for showing only the static routes is 


RouterA#sh ip route static 


The other place to check the routing configuration is by examining the router’s show running-config (sh 


running-configuration file using the command show running-config (sh run) as run) 


shown. The command displays the current configuration of the router but it does not The command that displays 


show what is currently saved in the router’s nonvolatile memory (NVRAM). The the router's running- 


command show startup-config (sh start) displays the router’s configuration savedin CoN figuration 

ae show startup-config (sh 
RouterA#sh run start) 
Using 519 out of 32762 bytes The command that displays 


! 
version 12.0 
service timestamps debug uptime service timestamps log uptime no service 
password-encryption 
! 
hostname Router 
! 
! 
ip subnet-zero 
! 
interface FastEthernet0/1 
ip address 10.10.200.1 255.255.255.0 
no ip directed-broadcast no keepalive 
! 
interface FastEthernet0/2 
ip address 10.10.100.1 255.255.255.0 
no ip directed-broadcast no keepalive 
! 
ip classless 
ip route 10.10.10.0 255.255.255.0 10.10.200.2 
ip route 10.10.10.0 255.255.255.0 10.10.100.2 
! 
line con 0 
transport input none line aux Q 
line vty @ 4 
! 
end 


the router's startup- 
configuration 


It is important that you save your configuration changes to the router as you go. copy run start 
Save changes to the router configuration using the copy running-configuration The command for copying 


startup-configuration command (copy run start) or write memory (wr m) as shown: the running-configuration to 


the startup-configuration 
RouterA#copy run start 


RouterA#wr m write memory (wr m) 


Table 7-1 in the section that follows shows a summary of the commands used when The command that saves 


configuring the static routes. 
to memory 
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Networking Challenge—Static Routes 


TABLE 7-41 Summary of Commands Used to Configure the Static 
Routing Protocol 


Command Use 

ip route Used to specify the destination IP address, the subnet 
mask, and the next hop IP address 

show ip route Shows the IP routes listed in the routing table 

show ip route static Shows only the static IP routes listed in the routing 
table 


show running-configuration Shows the router’s running-configuration 

show startup-configuration Shows the router's saved configuration in NVRAM 
write memory Copies the current router changes to memory (NVRAM) 
copy run start Copies the current router changes to memory (NVRAM) 


Use the Network Challenge software included with the text’s companion CD-ROM 
to demonstrate that you can configure static routes for a router. Place the CD-ROM 
in your computer’s drive. Open the Net-Challenge folder and double click the Net- 
Challenge.exe file. Select the Chapter 7—Static Routes challenge. Use the software 
to demonstrate that you can complete the following tasks. 

This challenge requires you to configure the static routes for RouterA. 


1. Click the RouterA select button and press Return to get started. 

2. Configure the default gateway address for computerAl in LAN A 
(10.10.20.250). To do so, click the computer Al icon in LAN A to bring up the 
TCP/IP Properties menu. Click OK on the menu, and press Enter to see the 
check. 

3. Configure the IP addresses for the FastEthernetO/0 and FastEthernetO/1 ports. 
Note: Click the RouterA symbol in the topology to display the IP addresses and 
subnet mask for the router. 

4. Use the no shut command to enable both FastEthernet ports. 

Use the show ip int brief command to view the current interface status. 

6. Use the ip route command to configure two routes to the 10.10.10.0 subnet 
(NET). Note: Click the RouterB and RouterC symbols in the network topology 
to display the IP addresses for the router interfaces. (Use a 255.255.255.0 sub- 
net mask.) 

7. Use the show ip route command to view whether the routes are entered into the 
router’s routing table. 

8. Use the show run command to verify whether the static routes are listed in the 
router’s running-configuration. 


A 


7-3 DYNAMIC ROUTING PROTOCOLS 


The concept of configuring a network using a static routing protocol was presented 
in section 7-2. It became obvious that the time required for entering and maintaining 
the static routes was a problem. Therefore, a static routing protocol is of limited use 
for campuswide network routing but is essential when configuring the default route 
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(gateway of last resort) on routers. However, static routes are used in situations such 
as configuring small networks with few routes. 


This section introduces an improvement over static routing through the use of 


dynamic routing protocols. Dynamic routing protocols enable the router’s routing 
tables to be dynamically updated to account for loss or changes in routes or changes 


in data traffic. The routers update their routing tables using information obtained from 


adjacent routers. The features of dynamic routing protocol are defined in Table 7-2. 
The routing protocol is responsible for managing the exchange of routing informa- 
tion between the routers, and the choice of protocol defines how the routing infor- 
mation is exchanged and used. 


TABLE 7-2 Features of Dynamic Routing Protocols 


Feature Description 

1 What information is exchanged between routers 
2 When updated routing information is exchanged 
3 Steps for reacting to changes in the network 

4 Criteria for establishing the best route selection 


Four key issues are associated with dynamic routing protocols: path determi- 


nation, metric, convergence, and load balancing. These issues are defined in Table 


7-3. 


TABLE 7-3 The Four Key Issues in Dynamic Routing Protocols 


Item Issue Purpose 

1 Path determination A procedure in the protocol that is used to determine 
the best route. 

2 Metric A numeric measure assigned to routes for ranking the 
routes best to worst; the smaller the number, the 
better. 

3 Convergence This happens when a router obtains a clear view of the 
routes in a network. The time it takes for the router to 
obtain a clear view is called the convergence time. 

4 Load balancing A procedure in the protocol that enables routers to use 
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any of the multiple data paths available from multiple 
routers to reach the destination. 


Examples of route metrics are as follows: 


Hop count: The number of routers the data packet must pass through to reach 
the destination network 

Reliability: A measure of the reliability of the link, typically in terms of the 
amount of errors 

Bandwidth: Having to do with the data capacity of the networking link; a Fast- 
Ethernet 100 Mbps link has greater data capacity than a 10 Mbps Ethernet link 
Delay: The time it takes for a data packet to travel from source to destination 
Cost: A value typically assigned by the network administrator that takes into 
account bandwidth and expense 

Load: Having to do with the network activity on a link or router 

Ticks: The measured delay time in terms of clock ticks, where each tick is ap- 
proximately 55 milliseconds (1/18 second) 
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There are two types of dynamic routing protocols: distance vector and link 
state. These protocols are briefly introduced in this section. The procedures for con- 
figuring a router to use dynamic routing protocols are examined in sections 7-4 to 7-7. 
Distance Vector Protocols 


Distance Vector Protocol A distance vector protocol is a routing algorithm that periodically sends the entire 


A routing algorithm that routing table to its neighboring or adjacent router. When the neighboring router re- 
periodically sends the entire ceives the table, it assigns a distance vector number to each route. The distance vec- 
routing table to its tor number is typically specified by some metric such as hop count. 

a or adjacent In a distance vector protocol, the router first determines its neighbors or adja- 


cent routers. All the connected routes will have a distance or hop count of 0. An ex- 
ample is shown in Figure 7-5. Routers use the hop count metric to determine the best 
route to forward a data packet. An example of determining the hop count to a desti- 
nation subnet is provided in Figure 7-6. 


10.10.10.0 10.10.20.0 





neighbor neighbor 
router router 
(hop count = 0) (hop count = 0) 


FIGURE 7-5 An example of router neighbors (hop count = 0). 
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Hop Count 


From: To: Hop Count 
RouterA 10.10.200.0 0 


RouterA = 10.10.150.0 1 
Router A 10.10.50.0 A 





FIGURE 7-6 An example of determining the router hops. 


238 —. Chapter7 e¢ Routing Protocols 


The hop count from RouterA to the 10.10.200.0, 10.10.150.0, and 10.10.50.0 
subnets are as follows: 


From To Hop Count 
RouterA 10.10.200.0 0 
RouterA 10.10.150.0 1 
RouterA 10.10.50.0 2 


In a distance vector protocol, each router determines its neighbors, builds its 
list of neighboring routers, and sends its routing table to its neighbors. The neigh- 
boring routers update their routing table based on the received information. When 
complete, each router’s routing table provides a list of known routes within the net- 
work. 


Link State Protocols 


Link state protocols establish a relationship with a neighboring router. The routers 
exchange link state advertisements to update neighbors regarding route status. The 
link state advertisements are sent only if there is a change or loss in the network 
routes and the link state protocols converge to route selection quickly. This is a dis- 
tinct advantage over distance vector protocols that exchange updated routing tables 
at fixed time intervals and are slow to converge. In fact, link state routing protocols 
are replacing distance vector protocols. Link state protocols are also called shortest- 
path first protocols, based on the algorithm developed by E. W. Dijkstra. An exam- 
ple of a link state protocol is OSPF, examined in section 7-6. Link state protocols use 
“Hello” packets to verify that communication is still established with neighbor 
routers. The key issues of link state protocols are summarized in Table 7-4. 


TABLE 7-4 Key Issues of Link State Protocols 


Finds neighbors/adjacencies 
Uses route advertisements to build routing table 
Sends “Hello” packets 


e 
e 
e 
e Sends updates when routing changes 


7-4 RIP—ROUTING INFORMATION PROTOCOL 


Routing Information Protocol (RIP) is a dynamic routing protocol, meaning the 
routers periodically exchange routes. RIP is classified as a distance vector protocol 
using router hop count as the metric. RIP permits a maximum of 15 hops to prevent 
routing loops. Routing loops occur when a router forwards packets back to the router 
that sent them, as graphically shown in Figure 7-7. RIP and other distance vector 
routing protocols send the entire routing table to neighbor routers at regular time in- 
tervals. Sometimes the routing tables can be quite large and the transfer can consume 
network bandwidth. This is of great concern in networks with limited bandwidth be- 
cause the periodic exchange can lead to slowdowns in data traffic. The default time 
interval for RIP for exchanging routing tables is 30 seconds. This results in slow route 
convergence, and if there are multiple routers sharing RIP routes, there will be even 
longer convergence time. 


Link State Protocol 
Establishes a relationship 
with a neighboring router 
and uses route 
advertisements to build 
routing tables 


RIP 
Routing Information 
Protocol 


Routing Loop 
Data is forwarded back to 


the router that sent the data 


packets 
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FIGURE 7-7 An example of data packet travel in a routing loop. Note that the packets 
never leave the routes between the two routers. 


Advertise The RIP routing protocol is enabled on the router by entering the command 
The sharing of route router RIP at the Router(config)# prompt in the privileged EXEC mode. Next, net- 
information work statements are required to declare what networks will be advertised by the RIP 
Glace Network Address routing protocol. To advertise the network means the routing table containing the 


The network portion of the network is shared with its neighbors. The network command requires the use of a 
IP address based on the class Class network address (class A, class B, class C) after the network command. This 


of the network is called classful addressing. A class network address or classful address is the net- 
; work portion of the address for the particular class of the network. For example, LAN 
Classful Addressing A in our campus network is on the 10.10.20.0 NET, as shown in Figure 7-8. This 1s 


The network portion of a 


a class A network and the network portion of the address is 10.0.0.0. The structure of 
particular network address 


the network command is network [network address], where the network address is 
the network where RIP is to be advertised; therefore, the command in RIP will be 
network 10.0.0.0. 
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Router B Port Addresses (LAN B Router B Port Addresses (LAN C Router Port Addresses (LAN D 





Router A Port Addresses (LAN A 





FastEthernet 0/0 10.10.20.250 | FastEthernet 0/0 10.10.10.250 | FastEthernet 0/1 10.10.1.250 FastEthernet 0/0 10.10.5.250 
(Gateway Address) (Gateway Address) (Gateway Address) (Gateway Address) 

FastEthernet 0/1 10.10.200.1 FastEthernet 0/2 10.10.200.2 FastEthernet 0/2 10.10.200.2 FastEthernet 0/1 10.10.150.2 

FastEthernet 0/2 10.10.100.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/2 10.10.100.2 


LAN A Computers LAN B Computers LAN C Computers LAN D Computers 


Computer A1 10.10.20.1 Computer B1 10.10.10.1 Computer C1 10.10.1.1 Computer D1 10.10.5.1 
Computer A2 10.10.20.2 Computer B2 10.10.10.2 Computer C2 10.10.1.2 Computer D2 10.10.5.2 


Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 








FIGURE 7-8 LAN A in the campus network. 
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The following discussion explains how to initialize RIP and how to set the net- 
works attached to the router. After these commands are entered, any interfaces that 
are part of the 10.0.0.0 network will run the RIP routing protocol. Note that subnets 
or subnet masks are not specified in the RIP network command because the class net- 
work address is used and all IP addresses in the network (for example, 10.0.0.0) are 
enabled to use RIP. 


Router(config)#router rip 
Router(config-router)#network 10.6.0.0 


RIP can be used only in contiguous networks, meaning the networks and routes 
must have the same class network address. This means the router addresses for the 
network connecting the routers must be the same class as the LAN connected to the 
router. This is shown in Figure 7-9 (a) and (b). LAN A and B have a 10.#.#.# address 
(also called a 70 network address). The network address connecting the two routers 
must also be a “10” network address. The IP address for the network connecting the 
two routers in Figure 7-9 (a) is 10.10.200.0. This is a “10” network address. The net- 
work shown in Figure 7-9 (b) uses the IP address of 192.168.10.0 for the network con- 
necting the two routers. An address of 192.168.10.0 is in the 192.168.10.0 network. 
This is not part of the 10.0.0.0 network; therefore, the 192.168.10.0 address is not 
suitable for use in RIP. 


10.10.200.0 NET 





10.10.20.0 NET 10.10.10.0 NET 
(a) 


must be a 


“10” network 
10.10.20.0 NET 10.10.10.0 NET 


(b) 





FIGURE 7-9 An example of (a) a contiguous network and (b) a discontiguous network. 


RIP is a relatively simple routing protocol to configure. However, RIP is good 
only for very small networks that have a limited staff size to manage the network and 
is not suited for networks that need fast convergence. RIP is a standard protocol, not 
a proprietary protocol, meaning the use of the protocol is not limited to certain equip- 
ment manufacturers. 
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Configuring Routes with RIP 


The first step in configuring the router for RIP is to set up the interfaces. This includes 
assigning an IP address and a subnet mask to the interface using the command ip 
address A.B.C.D. subnet-mask. Next the interface is enabled using the no shut com- 
mand. The following are the steps for configuring the FastEthernetO/1 interface on 
RouterA in the campus network shown previously in Figure 7-8: 

Router con® is now available 

Press RETURN to get started. 

RouterA>en 

Password: 

RouterA# conf t 

Enter configuration commands, one per line. End with CNTL/Z. 

Router(config)#int fa@/1 

Router(config-if)#ip address 10.10.200.1 255.255.255.0 

Router(config-if)#no shut 


00:59:03: %SLINEPROTO-5-UPDOWN: Line protocol on Interface FastEthernet1, 
changed state to up 


Next, enter the router’s configuration mode [Router(config)#] and input the 
command router rip to use the RIP routing protocol. The next step is to specify the 
network that uses RIP for routing. These two steps are shown next: 


Router (config)#router rip 
Router (config-router)#network 10.0.0.0 


The command router rip enables the RIP routing protocol and the command 
network 10.0.0.0 instructs the router to use RIP on the “10” network. Remember, RIP 
requires the use of a class network address (for example, 10.0.0.0). Notice that the 
router rip command places the router in the (config-router) mode, as shown in the 
prompt. This indicates that the router is in the state for specifying the networks using 
RIP. 

It’s a good idea to periodically check that the router interfaces are properly con- 
figured. The command show ip interface brief (sh ip int brief) is used to check the 
interfaces. This is an important troubleshooting command when looking for reasons 
why the router is not working. Use this command to check to see if the IP address has 
been assigned to the interface and to check the status and protocol settings. In this 
case, the FastEthernet0/1 port has been assigned the IP address 10.10.200.1, the sta- 
tus is up, and the protocol is up. The FastEthernet 0/0 and 0/2 ports for RouterA have 
not been configured, as shown, and the staus is administratively down and the proto- 


col is down: 
Router#sh ip int brief 
Interface IP-Address OK? Method Status Proto- 
col 

FastEthernet®/0 unassigned YES manual administratively down down 

FastEthernet@/1 1@.10.200.1 YES manual up up 

FastEthernet®@/2 unassigned YES unset administratively down down 
show ip protocol (sh ip The command show ip protocol (sh ip protocol) is used to display the routing 
protocol) protocols running on the router, as shown. This command will display protocol in- 
Displays the routing protocol formation only after the routing protocol has been enabled and the network addresses 
running on the router are specified. Notice that there are no values specified for the FastEthernetO/O and 


FastEthernet0/2 ports. Neither of these interfaces has been configured. The show ip 
protocol command also shows that router updates are being sent every 30 seconds and 
indicates that the next update is due in five seconds. 
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RouterA#sh ip protocol 

Routing Protocol is "rip" 

Sending updates every 30 seconds, next due in 5 seconds 

Invalid after 180 seconds, hold down 180, flushed after 240 

Outgoing update filter list for all interfaces is Incoming update filter 
list for all interfaces is Redistributing: rip 

Default version control: send version 1, receive any version 

Interface Send Recv Key-chain 

FastEthernet0/0 Q Q 0 

FastEthernet0/1 1 1 2 

FastEthernet0/2 Q Q Q 

Routing for Networks: 

10.0.0.0 

Routing Information Sources: 

Gateway Distance Last Update 

10.10.200.1 120 00:00:14 

Distance: (default is 120) 


The routes configured for the router can be displayed using the show ip route 
(sh ip route) command as shown. In this example, the FastEthernetO/0 and FastEth- 
ernet0/2 ports for RouterA have been configured and are displayed: 


Router#sh ip route 

Codes: C - connected, S - static, I - IGRP, R - RIP, M - mobile, B - BGP 
D - EIGRP, EX - EIGRP external, O - OSPF, IA - OSPF inter area 

N1 - OSPF NSSA external type 1, N2 - OSPF NSSA external type 2 

E1 - OSPF external type 1, E2 - OSPF external type 2, E - EGP 

I - IS-IS, L1 - IS-IS level-1, L2 - IS-IS level-2, * candidate default 

U - per-user static route, o - ODR T - traffic engineered route 

Gateway of last resort is not set 

10.@.0.0/24 is subnetted, 1 subnets 

C 10.10.20.0 is directly connected, FastEthernet0/0 

C 10.10.200.@ is directly connected, FastEthernet®Q/1 

C 10.10.100.@ is directly connected, FastEthernet®/2 


Verify the settings in the running-configuration file by using the sh run com- 
mand. Recall that this is the abbreviated command for show running-configuration. 
The configuration list should show that the interfaces have been assigned an IP ad- 
dress and that RIP has been configured. 


RouterA#sh run ! 1. sh run command 
Building configuration... ! 2. assembling the data file 
! ! 3. ! is used for spaces or comments 
Current configuration: 
! 
version 12.0 ! 6. displays the Cisco IOS version ser- 
vice timestamps debug uptime 
service timestamps log uptime 
no service password-encryption ! 9. the enable (line 14) and vty 
(line 42) 
! passwords appear as plaintext 
! 
hostname RouterA 11. the name of the router 
! 
enable secret 5 $1$6EWO$kWlakDz89zac.koh/pyG4. ! 13. the encrypted 
enable 
!secret 
enable password Salsa 114. the enable password 
! 
ip subnet-zero ! 16. enables subnet zero routing 
! 
interface FastEthernet0/Q ! 18. FastEthernet0/@ settings 


ip address 10.10.20.0 255.255.255.0 


no ip directed-broadcast 
! 
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interface FastEthernetO/1 ! 22. FastEthernet®/1 settings 
ip address 10.10.200.1 255.255.255.0 

no ip directed-broadcast 

no mop enabled 

! 

interface FastEthernet0/2 ! 27. FastEthernet®/2 settings 
ip address 10.10.100.1 255.255.255.0 

no ip directed-broadcast no mop enabled 

! 

router rip ! 33. enable RIP 

network 10.0.0.0 ! 34. specify a network class address 
! 

ip classless 

! 

line con 0 

transport input none 

line aux @ 


line vty 0 4 ! 41. virtual terminal settings for tel- 
net 

password ConCarne ! 42. telnet password 

login 

! 

end 


Lines 18, 22, and 27 list the assigned IP addresses for the interface. Lines 33 


and 34 show that RIP has been configured for the router. The sh run command dis- 
plays the router’s running configuration. The copy run start command must be en- 
tered to save to NVRAM the changes made to the router’s configuration. 


Networking Challenge—RIP 


Use the router simulator software included with the text’s companion CD-ROM to 
demonstrate that you can configure RIP for RouterA in the campus LAN. (Note: The 
campus LAN is shown in Figure 7-8 and is displayed on the computer screen after 
the software is started.) Place the CD-ROM in your computer’s drive. Open the Net- 
Challenge folder, and click NetChallenge.exe. When the software is running, click 
the Select Router Challenge button to open a Select Router Challenge drop-down 
menu. Select Chapter 7—RIP. This opens a checkbox that can be used to verify that 
you have completed all the tasks. 


l. 
. Enter the router configuration mode, Router(config). 


Enter the privileged EXEC mode on the router. 


Configure the FastEthernet0/0 interface with the following: 
IP address 10.10.20.250 

Subnet mask 255.255.255.0 

Enable the FAO/O interface. 

Configure the FastEthernet0/1 interface with the following: 
IP address 10.10.200.1 

Subnet mask 255.255.255.0 

Enable the FAO/1 interface. 

Configure the FastEthernet0/2 interface with the following: 
IP address 10.10.100.1 

Subnet mask 255.255.255.0 

Enable the FAO/2 interface. 

Enable RIP. 

Use the network command to specify the class network address to be used by 
RIP (10.0.0.0). 
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11. Use the sh ip int brief command to check the interface status. 

12. Use the sh ip protocol command to see whether RIP is running. (Note: This re- 
quires that Steps 9 and 10 are complete or the response will be “no protocol.” 

13. Use the show ip route command to verify whether the three FastEthernet ports 
are connected to the router. 

14. Display the contents of the running-configuration file. Verify that RIP is en- 
abled and the proper network address is specified. 

15. Copy the router’s running-configuration to the startup-configuration. 

16. Display the contents of the startup-configuration. 


7-5 IGRP—INTERIOR GATEWAY ROUTING 
PROTOCOL 


Interior Gateway Routing Protocol (IGRP) is a Cisco proprietary distance vector dy- [GRP 
namic routing protocol. [GRP is similar to RIP in that it is simple to configure. [GRP Interior Gateway Routing 
has some of the same limitations as RIP in that the networks must have contiguous Protocol 
network addresses, and IGRP can’t have variable length subnet masks. However, 
IGRP has a maximum hop count of 255 compared to RIP, which has a 16-router hop 
limitation. The time interval for exchanging the routing tables with IGRP is 90 sec- 
onds. This limits the effect routing table exchanges can have on data traffic compared 
to RIP, which updates tables every 30 seconds. 
IGRP uses a composite metric (set of metrics) consisting of internetwork de- 
lay, reliability, bandwidth, and load for determining the best route. The router pro- 
vides default settings or the network administrator can customize route selection to 
better meet the needs of routing in and out of its network. 
IGRP includes two features that improve its stability in routing data packets: 


e Holddowns: Prevent a bad route from being reinstated Holddowns 
e Split horizons: Prevent information about a route from being sent back the Split Horizons 
same way it came, thus preventing routing loops 


If you have the same route to a destination configured with IGRP and RIP, the Administrative Distance 
preferred route is with IGRP. This preference is accomplished with a parameter called A number assigned to a 
administrative distance. The administrative distance is a number assigned to a pro- protocol or route to declare 
tocol or a route to declare its reliability. The lower the administrative distance num- its reliability 
ber, the better the protocol or route. Each routing protocol has a default administrative 
distance. 

A router uses the administrative distance to resolve which routing protocol is 
chosen when there are conflicts. For example, a router might learn a route to a 
10.0.0.0 network using RIP. The same router might also learn of a route to the 
10.0.0.0 network using IGRP. RIP has an administrative distance of 120 and IGRP 
has an administrative distance of 100. IGRP has the lower administrative distance 
number; therefore, the router will select the IGRP route. A summary of administra- 
tive distances for selected routing protocols is provided in Table 7-5. 
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router igrp [AS number] 
The router command for 
specifying IGRP 


Autonomous System 
(AS) 

A number assigned to a 
routing protocol to define 
which networks exchange 
routes 


Classful Network 
Same as a class network 
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TABLE 7-5 Administrative Distances and Routing Protocols 
Protocol Administrative Distance 

Connected 0 

Static route 1 

EIGRP 90 

IGRP 100 

OSPF 110 

RIP 120 


The command for specifying the IGRP routing protocol is router igrp [AS num- 
ber] where the AS number is an autonomous system (AS) number assigned to the 
protocol. An autonomous system number is similar to a server’s domain in that the 
router looks for another connected router using [GRP that has the same AS number. 
If the networks have the same AS number, IGRP routes will be exchanged. 


RouterA(config)# router igrp 200 
RouterA(config)# network 10.0.0.0 


IGRP can be used only in contiguous networks, which means the subnets in the 
network must belong to the same classful network. A classful network is the same 
as a class network. This means the router addresses for the network connecting the 
routers must be the same class network as the LAN connected to the router. This was 
shown in Figure 7-9 (a) and (b). LAN A and B have a 10.#.#.# address (as noted, also 
called a 70 network address). The network address connecting the two routers must 
also be a “10” network address. The IP address for the network connecting the two 
routers in Figure 7-9 (a) is 10.10.200.0. This is a “10” network address. The network 
shown in Figure 7-9 (b) uses the IP address of 192.168.10.0 for the network con- 
necting the two routers. An address of 192.168.10.0 is in the 192.168.10.0 network. 
This is not part of the “10” network; therefore, the 192.168.10.0 address cannot be 
used in this position. 


Configuring Routes with IGRP 


This section demonstrates how to configure the routers to use the IGRP routing pro- 
tocol for the three-router campus network shown in Figure 7-10. 

The first step in configuring RouterA to use IGRP is to set up the IP address 
and subnet masks for the interfaces on the three routers. Make sure you use the no 
shut command to enable the interface. Next, at the RouterA(config)# prompt, enter 
the command router igrp [AS number] to use the IGRP routing protocol. You must 
also specify the network that will be using IGRP for routing. These two steps are as 
follows: 


RouterA(config)#router igrp 200 
RouterA(config-router)#network 10.6.0. 
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10.10.20.0 Net 10.10.10.0 Net 10.10.1.0 Net 10.10.5.0 Net 
LAN A LAN C LAN D 
Switch Switch 
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== £ = =; = = 
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Router A Port Addresses (LAN A) | Router B Port Addresses (LAN B) | Router B Port Addresses (LAN C) | Router Port Addresses (LAN D) 


FastEthernet 0/0 10.10.20.250 | FastEthernet 0/0 10.10.10.250 | FastEthernet 0/1 10.10.1.250 FastEthernet 0/0 10.10.5.250 
(Gateway Address) (Gateway Address) (Gateway Address) (Gateway Address) 

FastEthernet 0/1 10.10.200.1 FastEthernet 0/2 10.10.200.2 FastEthernet 0/2 10.10.200.2 FastEthernet 0/1 10.10.150.2 

FastEthernet 0/2 10.10.100.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/2 10.10.100.2 





LAN A Computers LAN B Computers LAN C Computers LAN D Computers 


Computer A1 10.10.20.1 Computer B1 10.10.10.1 Computer C1 10.10.1.1 Computer D1 10.10.5.1 
Computer A2 10.10.20.2 Computer B2 10.10.10.2 Computer C2 10.10.1.2 Computer D2 10.10.5.2 


Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 


FIGURE 7-10 Routers A, B, and C in the three-router campus network. 


The command router igrp 200 enables the IGRP routing protocol and specifies Router(config-router) # 


an autonomous number of 200. The command network 10.0.0.0 instructs the router The prompt indicating the 
to use IGRP on the “10” network. Notice that the router igrp command places the router is in the mode to 
router in the RouterA (config-router)# mode as shown in the prompt. This indicates accept routing commands 
that the router is in the state for specifying the IGRP-specific commands. You can ver- 

ify that IGRP is running on RouterA by entering the command sh ip protocol as 

shown at the enable prompt (RouterA#): 


RouterA# sh ip protocol 

Routing Protocol is “igrp 200" 

Sending updates every 90 seconds, next due in 53 seconds 

Invalid after 270 seconds, hold down 280, flushed after 630 

Outgoing update filter list for all interfaces is Incoming update filter 
list for all interfaces is Default networks flagged in outgoing 
updates Default networks accepted from incoming updates IGRP metric 
weight K1 1, K2 ®©, K3 1, K4 0, K5 @ 

IGRP maximum hopcount 100 

IGRP maximum metric variance 1 

Redistributing: igrp 10 

Routing for Networks: 

10.0.0.0 

Routing Information Sources: 

Gateway Distance Last Update 

Distance: (default is 100) 


The text shows that the routing protocol is “igrp 200”, updates are being sent 
every 90 seconds, and it states that the next update is due in 53 seconds. 
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Next, the command show ip route (sh ip route) can be used to examine the con- 
tents of RouterA’s routing table to see if any IGRP routes have been received: 


RouterA# sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 3 subnets 

C 10.10.20.@ is directly connected, FastEthernet0/0 

C 10.10.100.@ is directly connected, FastEthernetQ/1 

C 10.10.200.@ is directly connected, FastEthernet0/2 


The command sh ip protocol indicates whether IGRP has been enabled on the 
router. This table shows the connected (C) networks but IGRP (J) is not enabled for 
any networks. Why? At this point, IGRP has been enabled only on RouterA in the 
campus network. Routers B and C also need to have IGRP enabled. Use the com- 
mands router igrp and network to enable IGRP on RouterB. IGRP was next config- 
ured on RouterB and the updated routing table for RouterA is provided: 


RouterA# sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 6 subnets 

I 10.10.1.0 [100/8576] via 10.10.200.2, 00:00:54, FastEthernetO/1 

10.10.10.0 [100/8576] via 10.10.200.2, 00:00:54, FastEthernetdO/1 

10.10.20.0 is directly connected, FastEthernet0/0 

10.10.100.0 is directly connected, FastEthernet0/2 

10.10.150.0 [100/10476] via 10.10.200.2, 00:00:54, FastEthernet®/1 

10.10.200.0 is directly connected, FastEthernetO/1 


OHOaO H 


Examination of the routing table shows IGRP is being used for routing to three 
subnets, 10.10.1.0, 10.10.10.0, and 10.10.150.0, and that three subnets are directly 
connected to RouterA, 10.10.20.0, 10.10.100.0, and 10.10.200.0. There are seven 
subnets in the campus LAN shown in Figure 7-10. IGRP has been configured on 
Routers A and B but routes using IGRP have not been defined in the campus network 
for the 10.10.5.0 NET. This requires that IGRP be enabled on RouterC. The com- 
mands router igrp and network are used to enable IGRP on RouterC. After config- 
uring IGRP on RouterC, examination of RouterA’s routing table shows the following: 


RouterA# sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 7 subnets 

I 10.10.1.0 [100/8576] via 10.10.200.2, 00:01:11, FastEthernetO/1 

10.10.5.@ [100/8576] via 10.10.100.2, 00:01:03, FastEthernet0/2 

10.10.10.0 [100/8576] via 10.10.200.2, 00:01:11, FastEthernetdo/1 

10.10.20.0 is directly connected, FastEthernet0/0 

10.10.100.0 is directly connected, FastEthernet0/2 
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I 10.10.150.@ [100/10476] via 10.10.200.2, 00:01:11, FastEthernet@/1 
[100/10476] via 10.10.100.2, 00:01:03, FastEthernetd/2 
C 10.10.200.@ is directly connected, FastEthernet®Q/1 


IGRP has now been configured for the three routers in the campus network and 
routes have been defined for all seven subnets. 

The command show ip route igrp (sh ip route igrp) can be used to view the show ip route igrp (sh 
routing table for one protocol, such as IGRP, as shown: ip route igrp) 


RouterA#sh ip route igrp Displays only the IGRP 


10.0.0.0/24 is subnetted, 7 subnets routes 
I 10.10.1.0 [100/8576] via 10.10.200.2, 00:00:02, FastEthernetQ/ 1 

I 10.10.5.0 [100/8576] via 10.10.100.2, 00:00:03, FastEthernetQ/2 

I 10.10.10.0 [100/8576] via 10.10.200.2, 00:00:02, FastEthernetO/ 1 

I 10.10.150.0 [100/10476] via 10.10.200.2, 00:00:02, FastEthernetQ/ 1 


The final step is to view the running-configuration in each router using the sh 
run command. The running-configuration for RouterA 1s provided. Notice the entries 
for router igrp 200 and network 10.0.0.0 in the running-configuration file. 


RouterA#sh run 

Building configuration... 

Current configuration: 

! 

version 12.0 

service timestamps debug uptime service timestamps log uptime no service 

password-encryption 

! 

hostname RouterA 

! 

enable secret 5 $1$6M4r$dleo7h1WP@AYuQK/cM6M91 

enable password Salsa 

! 

ip subnet-zero 

! 

interface FastEthernet0/0 

ip address 100.10.20.250 255.255.255.0 
no ip directed-broadcast 

! 

interface FastEthernet0/1 

ip address 10.10.200.1 255.255.255.0 
no ip directed-broadcast 

! 

interface FastEthernet0/2 

ip address 10.10.100.1 255.255.255.0 
no ip directed-broadcast 

! 

router igrp 200 

network 100.0.0.0 

! 

ip classless 

! 

line con 0 

transport input none line aux 0 

line vty ® 4 password chile login 

! 

end 


Remember to use the copy run start command to save the changes made to 
NVRAM. 
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Networking Challenge—IGRP 


Use the Net-Challenge simulator software included with the text’s companion CD- 
ROM to demonstrate that you can configure IGRP for RouterB in the campus LAN 
(the campus LAN is shown in Figure 7-10 and is displayed on the computer screen 
after the software is started). Place the Net-Challenge CD-ROM in your computer’s 
drive. Open the Net-Challenge folder, and click NetChallenge.exe. When the soft- 
ware is running, click the Select Router Challenge button to open a Select Router 
Challenge drop-down menu. Select Chapter 7— IGRP. This opens a checkbox that 
can be used to verify that you have completed all the tasks. A check next to a task in- 
dicates that the task has been successfully completed. 


Click the RouterA button. 
Enter the privileged EXEC mode on the router. 
Enter the router configuration mode, Router(config). 
Set the hostname to RouterA. 
Configure the FastEthernet0/0 interface with the following: 
IP address 10.10.20.250 
Subnet mask 255.255.255.0 
Enable the FAO/O interface. 
7. Configure the FastEthernet0/1 interface with the following: 
IP address 10.10.200.1 
Subnet mask 255.255.255.0 
8. Enable the FAO/1 interface. 
9. Configure the FastEthernet0/2 interface with the following: 
IP address 10.10.100.1 
Subnet mask 255.255.255.0 
10. Enable the FAO/2 interface. 
11. Enable IGRP on RouterA, using an AS of 200. 
12. Use the network command to specify the class network address to be used by 
IGRP. 
13. Use the sh ip int brief command to check the interface status. 
14. Use the sh ip protocol to see whether IGRP is running. 
15. Use the sh ip route command to verify that the four FastEthernet ports are con- 
nected to the router. 
16. Use the sh run command to view the running-configuration file. Verify that 
IGRP is enabled and the proper network address is specified. 
17. Copy the running-configuration to the startup-configuration. 
18. Display the contents of the startup configuration. 


eg er ee 


On 


7-6 OSPF—OPEN SHORTEST PATH FIRST 
ROUTING PROTOCOL 


OSPF Open Shortest Path First (OSPF) is a dynamic routing protocol, classified as a link 
Open Shortest Path First state protocol. It was developed by the Interior Gateway Protocol (IGP) working 
routing protocol group for the Internet Engineering Task Force (IETF) specifically for use in TCP/IP 
networks. OSPF is an open, not proprietary, protocol and is supported by many ven- 

IETF . . . 
- Lae dors. The main advantages of OSPF are rapid convergence and the consumption of 

nternet Engineering Task 
Porce very little bandwidth. When a network is completely converged, all the routers in the 
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network agree on the best routes. After the initial flooding of routes in the form of 
link state advertisements or LSAs, OSPF sends route updates only when there is a 
change in the network. Every time LSAs are sent, each router must recalculate the 
routing table. 

This is a distinct advantage over RIP and IGRP. Recall that RIP and IGRP ex- 
change the entire routing table at fixed time intervals. RIP updates every 30 seconds, 
IGRP every 90 seconds. Also, in RIP and IGRP, the routing table update is propagated 
through the network at regular timer intervals, and therefore the convergence to final 
routes is slow. In OSPF, an LSA is sent as soon as the loss of a route has been de- 
tected. The loss is immediately reported to neighbor routers and new routes are cal- 
culated much faster than with RIP and IGRP. 

OSPF sends small “Hello” packets at regular time intervals to adjacent routers 
to verify that the link between two routers is active and the routers are communicat- 
ing. If a router fails to respond to a “Hello,” it is assumed that the link or possibly the 
router is down. The OSPF “Hello” packet captured with the Surveyor Demo protocol 
analyzer is discussed in section 7-10. 

OSPF uses the concept of areas to partition a large network into smaller net- 
works. The advantage of this is that the routers have to calculate routes only for their 
area. If a route goes down in a given area, only the routers in that area have to calcu- 
late new routes. Any number between 0 and 4294967295 (2?? — 1) can be used; how- 
ever, area 0 is reserved for the root area, which is the backbone for the network. The 
backbone is the primary path for data traffic to and from destinations and sources in 
the campus network. All areas must connect to area 0, and area 0 cannot be split. The 
area numbers can also be expressed in IP notation—for example, area 0 could be 
0.0.0.0—or you can specify an area as 192.168.25.0 or in subnet notation. Hence the 
need for the large upper area number. (2°? — 1) = 255.255.255.255 when converted to 
a decimal number. 

OSPF allows the use of variable length subnet masks (VLSMs), which en- 
able different size subnets in the network to better meet the needs of the network and 
more efficiently use the network’s limited IP address space. For example, point-to- 
point inter-router links don’t need a large block of addresses assigned to them. An ex- 
ample of an inter-router link is shown in Figure 7-11. A subnet of size 4 is sufficient 
for the inter-router link that includes the IP addresses for the router interfaces, the net- 
work address, and the broadcast address. A subnet mask of 255.255.255.252 meets 
this requirement of a subnet size 4 and is permissible in OSPF. This subnet mask pro- 
vides for the addressing of the two host addresses (the router interfaces on each end), 
and the network and broadcast addresses, which provides the total subnet size of 4. 
(Refer to Chapter 5 to review subnet masking if needed.) This is an important advan- 
tage of OSPF because using variable length subnet masks minimizes the waste of IP 
addresses when interconnecting subnets. A summary of OSPF’s advantages and dis- 
advantages is presented in Table 7-6. 


10.10.250.1 


10.10.250.2 





10.10.250.0 Network address 
10.10.250.3 Broadcast address 
10.10.25.0 Subnet 


FIGURE 7-11 An inter-router link subnetted to provide for two host IP address, a network 
address and a broadcast address. 
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Link State 
Advertisement (LSA) 
The exchange of updated 
link state information when 
routes change 


“Hello” Packets 

Used in the OSPF protocol to 
verify that the links are still 
communicating 


Areas 

The partition of a large OSPF 
network into smaller OSPF 
networks 


Backbone 

The primary path for data 
traffic to and from 
destinations and sources in 
the campus network 


Variable Length Subnet 
Masks (VLSM) 

Allows the use of subnet 
masks to better fit the needs 
of the network, thereby 
minimizing the waste of IP 
addresses when 
interconnecting subnets 
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TABLE 7-6 Summary of Advantages and Disadvantages of OSPF 


Advantages Disadvantages 


Not proprietary—available for Can be very complicated to implement 
use by all vendors 
Link state changes are immediately Is process intensive due to routing table 


reported, which enables rapid calculations 

convergence 
Route Flapping Consumes very little network Intermittent routes that are going up and down 
Intermittent routes going up bandwidth will create excessive LSA updates—this is called 
and down creating excessive route flapping 
LSA updates Uses VLSM (variable length 


subnet masking) 

Uses areas to partition the 
network into smaller networks, 
minimizing the number of 
route calculations 


Configuring Routes with OSPF 


This section describes a procedure for configuring OSPF on a router. The first exam- 
ple is for configuring the three routers in the campus LAN shown in Figure 7-12. The 
routers will be configured to run OSPF on each of the router’s three Ethernet inter- 
faces. The example begins with configuring RouterA. RouterA must first be placed 
in the router’s configuration mode [Router(config)#] as shown: 

RouterA#conf t 


Enter configuration commands, one per line. End with CNTL/Z. 
RouterA(config)# 


The next step is to enter the information about the IP address for each of the 
Ethernet interfaces. The IP addresses for RouterA are as follows: 


FastEthernet0/0 10.10.20.250 
FastEthernet0/1 10.10.200.1 
FastEthernet0/2 10.10.100.1 


A subnet mask of 255.255.255.0 is assigned to each of the FastEthernet inter- 
faces. After the FastEthernet interfaces are configured, verify the configuration set- 
tings using the sh ip int brief command as shown. Make sure the status for the 
FastEthernet interfaces are up. This indicates that the interfaces are turned on and an 
Ethernet networking device is connected. The protocol will show down until the Eth- 
ernet cable is connected and the connecting interface is enabled. In this case, the con- 
necting interfaces to FA0/1 and FAO/2 are not enabled and therefore show a status of 


down. 
RouterA#sh ip int brief 
Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES manual up up 
FastEthernet@/1 10.10.200.1 YES manual up down 
FastEthernet@/2 10.10.100.1 YES manual up down 
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Router A Port Addresses (LAN A Router B Port Addresses (LAN B Router B Port Addresses (LAN C Router Port Addresses (LAN D 


FastEthernet 0/0 10.10.20.250 | FastEthernet 0/0 10.10.10.250 | FastEthernet 0/1 10.10.1.250 FastEthernet 0/0 10.10.5.250 
(Gateway Address) (Gateway Address) (Gateway Address) (Gateway Address) 

FastEthernet 0/1 10.10.200.1 FastEthernet 0/2 10.10.200.2 FastEthernet 0/2 10.10.200.2 FastEthernet 0/1 10.10.150.2 

FastEthernet 0/2 10.10.100.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/3 10.10.150.1 FastEthernet 0/2 10.10.100.2 


LAN A Computers LAN B Computers LAN C Computers LAN D Computers 


Computer A1 10.10.20.1 Computer B1 10.10.10.1 Computer C1 10.10.1.1 Computer D1 10.10.5.1 
Computer A2 10.10.20.2 Computer B2 10.10.10.2 Computer C2 10.10.1.2 Computer D2 10.10.5.2 


Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 | Subnet Mask 255.255.255.0 





FIGURE 7-12 The three-router campus LAN. 


Next, the command router ospf <process id> is used to enable OSPF routing. router ospf [number] 
In this case, the command router ospf 100 is entered. The 100 is the process idnum- The command used to enable 
ber. This number must be the same on each router for OSPF to exchange routes. The CPE TOUHNY 
process id number is selected by the network administrator and is not used for rout- 
ing outside the network. It is customary to use the same process id throughout the net- 
work for ease of management but it is not required. Entering the router ospf 100 
command places the router in the RouterA (config-router)# prompt: 


RouterA(config)#router ospf 100 
RouterA(config-router)# 


The next step is to define the network running OSPF by entering the network 
command followed by the IP address of the interface, the OSPF wild card bits, and 
then an area number. The following text shows each step and lists the results of en- 
tering a question mark as the command is entered. When entering the command 
network ? the router prompts you to enter the IP address of the interface. 


RouterA(config-router)#network ? 
A.B.C.D Network number 


l l Network Number 
A.B.C.D is the IP address or network number for the Ethernet interface. Next, Another name for the IP 


entering network 10.10.20.250 ? prompts you to enter the OSPF wild card bits inthe subnet 
form of A.B.C.D. The wild card bits, also called the inverse mask bits, are used to 
match the network IP address (A.B.C.D format) to interface IPs. If there is a match, Wild Card Bits 


the subnet on the interface is advertised out OSPF and OSPF packets are sent out the Used to match network IP 
addresses to interface IPs 
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interface. A O wild card bit is used to indicate a “must” match. A 255 is a “don’t care,” 
hence the name inverse mask. 


Area 0 The last entry when defining an OSPF route is for the area. Remember, areas 
In OSPF this is the root area are used to partition a large network into smaller networks. Area 0 is the root area 
and is the backbone for the and is the backbone for the network. All other areas must connect to area 0. Area 0 
network cannot be split. Other area numbers are specified by the network administrator. 


Assume that the router command network 10.10.20.250 0.0.0.0 area 0 is en- 
tered. The wild card bits indicate that any interface with an address of 10.10.20.250 
must run OSPF on the interface and will be assigned to area O (the network back- 
bone). Assume that the router command network 10.10.20.250 0.255.255.255 area 0 
is entered. The wild card bits indicate that any interface with an IP address of 10.x.x.x 
must run OSPF on the interface and will be assigned to area 0. 

RouterA(config-router)#network 180.10.20.2586 ? 

A.B.C.D OSPF wild card bits 

RouterA(config-router)#network 180.18.26.250 0.0.0.0 ? 


area Set the OSPF area ID 
RouterA(config-router)#network 180.10.20.250 6.0.0.6 area ð 


The following text details the three OSPF network entries needed to configure 
OSPF routing for RouterA: 

RouterA(config-router)#network 180.10.20.250 6.0.0.6 area ð 

RouterA(config-router)#network 10.10.200.1 0.0.0.0 area ð 

RouterA(config-router)#network 10.10.100.1 0.0.0.0 area @ 

Note that the RouterA interface to LAN A (10.10.20.250 NET) is listed when 
configuring OSPF. This is used in OSPF to advertise the LAN to the other routers. 
Also note that the network has been assigned to area O (the backbone). The command 
sh ip int brief is used to check the status of the interfaces. The text protocol down in- 
dicates that the cable to the interface is either unplugged or the interface is shut down. 


RouterA#show int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/@ 10.10.20.250 YES  NVRAM up up 
FastEthernet@/1 10.10.200.1 YES manual up down 
FastEthernet@/2 10.10.100.1 YES manual up down 


This problem with the “protocol down” is fixed by reestablishing the physical 
connection between the routers. 

The next step is to configure RouterB. First configure the four FastEthernet in- 
terfaces on RouterB. Next, the OSPF routing protocol for RouterB is set. In this ex- 
ample, one command line instruction is used to configure RouterB to run OSPF on 
all four of its interfaces. This is done with a subnet mask or wild card in OSPF. First 
enter RouterB’s configuration mode using the conf t command. The command router 
ospf 100 is entered. Note that the same process id number of 100 is being used. The 
next step is to enter network 10.0.0.0 0.255.255.255 area 0. This command tells the 
router that any address that starts with a “10” belongs to area 0 on RouterB. 

RouterB#conf t 

Enter configuration commands, one per line. End with CNTL/Z. 


RouterB(config)#router ospf 100 
RouterB(config-router)#network 10.0.0.0 0.255.255.255 area @ 
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Verify that the interfaces are properly configured using the sh ip int brief com- 
mand, as shown: 


RouterB#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/0 10.100.10.250 YES manual up up 
FastEthernetd/1 10.10.1.250 YES manual up up 
FastEthernet0/2 10.10.200.2 YES manual up up 
FastEthernet®/3 10.10.150.1 YES manual up down 


The FastEthernet0/3 interface shows the protocol is down because the con- 
necting interface is shut down on RouterC. 

The next step is to configure RouterC. The OSPF routing protocol for RouterC 
is set using the command router OSPF 100 followed by network 10.0.0.0 
0.255.255.255 area 0, as shown. 


RouterC(config)#router ospf 100 
RouterC(config-router)#network 10.0.0.0 @.255.255.255 area ð 


The interfaces on RouterC are checked using the sh ip int brief command, as 
shown: 


RouterC#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/Q 10.10.5.250 YES manual up up 
FastEthernetd/1 10.10.15@.2 YES manual up up 
FastEthernet0/2 10.10.10@.2 YES manual up up 


Notice that protocol shows up for all interfaces. This is because all interfaces 
are connected and the interfaces are enabled. 

The following is a partial listing of the running-configuration file on RouterA 
that shows the router OSPF network configuration. Similar information will appear 
on Routers B and C. 


router ospf 100 
network 10.10.200. 
network 10.10.100. 


area @ network 10.10.20.250 0.0.0.0 area 0 


1 0.0.0.0 
1 0.0.0.0 area 0 


The routing table for RouterA can be checked using the command sh ip route, 
as shown. The routing table indicates there are seven subnets in the campus network 
shown in Figure 7-12. The “Os” indicate the subnets running OSPF and “C” indicates 
the subnets directly connected to the router: 


RouterA#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 7 subnets 

O 10.10.5.@ [110/74] via 10.10.100.2, 00:03:28, FastEthernetQ/2 

10.10.10.0 [110/74] via 10.10.200.2, 00:03:28, FastEthernet®O/ 1 

10.10.1.@ [110/74] via 10.10.200.2, 00:03:28, FastEthernet®Q/1 

10.10.20.@ is directly connected, FastEthernet0/0 

10.10.10@.0 is directly connected, FastEthernet0/2 

O 10.10.150.0 [110/128] via 10.10.200.2, 00:03:28, FastEthernetQ/1 

[110/128] via 10.10.100.2, 00:03:28, FastEthernetQ/2 

C 10.10.200.@ is directly connected, FastEthernetQ/1 


OOOO 


Section 7-6 e» OSPF—OPEN SHORTEST PATH FIRST ROUTING PROTOCOL 


S 


255 


A command used to display only the OSPF routes is sh ip route ospf. The fol- 
lowing are the results for this command from RouterA: 

RouterA#sh ip route ospf 

10.0.0.0/24 is subnetted, 6 subnets 

O 10.10.5.0 [110/74] via 10.10.100.2, 00:10:03, FastEtherneto/2 

O 10.10.10. [110/74] via 10.10.200.2, 00:10:03, FastEthernetd/1 


O 10.10.150.@ [110/128] via 10.10.200.2, 00:10:03, FastEthernetQ/1 
[110/128] via 10.10.100.2, 00:10:03, FastEthernet®/2 


Another command used for displaying protocol information for the router is sh 
ip protocol. The following are the results for entering this command for RouterA: 

RouterA#sh ip protocol 

Routing Protocol is "“ospf 100" Sending updates every @ seconds 

Invalid after @ seconds, hold down @, flushed after 0 

Outgoing update filter list for all interfaces is Incoming update filter 
list for all interfaces is Redistributing: ospf 100 

Routing for Networks: 

10.10.20.250/32 

10.10.100.1/32 

10.10.200.1/32 

Routing Information Sources: 

Gateway Distance Last Update 

10.10.100.1 110 00:06:01 


10.10.200.2 110 00:06:01 
Distance: (default is 110) 


Networking Challenge—OSPF 


Use the Net-Challenge simulator software included with the text’s companion CD- 
ROM to demonstrate that you can configure OSPF for RouterB in the campus LAN 
(the campus LAN is shown in Figure 7-12 and is displayed on the computer screen 
when the software is started). Place the Net-Challenge CD-ROM in your computer’s 
drive. Open the Net-Challenge folder and click NetChallenge.exe. When the soft- 
ware is running, click the Select Router Challenge button to open a Select Router 
Challenge drop-down menu. Select Chapter 7— OSPF. This opens a checkbox that 
can be used to verify that you have completed all the tasks. 


Enter the privileged EXEC mode on the router. 
Enter the router’s terminal configuration mode, Router(config). 
Set the hostname to RouterA. 
Configure the FastEthernet0/0 interface with the following: 
IP address 10.10.20.250 
Subnet mask 255.255.255.0 
Enable the FAO/0 interface. 
6. Configure the FastEthernet0/1 interface with the following: 
IP address 10.10.200.1 
Subnet mask 255.255.255.0 
7. Enable the FAO/1 interface. 
8. Configure the FastEthernet0/2 interface with the following: 
IP address 10.10.100.1 
Subnet mask 255.255.255.0 
9. Enable the FA0/2 interface. 
10. Enable OSPF with a network number of 100. 
11. Use a single command-line instruction to configure RouterA to run OSPF on 
all three of the FastEthernet interfaces (use area 100). 


a 


A 
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12. Use the sh ip int brief command to check the interface status. 

13. Use the sh ip protocol command to see whether OSPF is running on RouterA. 

14. Use the sh ip route command to verify that the three FastEthernet ports are con- 
nected to RouterA. 

15. Use the sh run command to view the running-configuration file on RouterA. 
Verify that OSPF is enabled and the proper network address is specified. 


7-7 EIGRP—ENHANCED INTERIOR GATEWAY 
ROUTING PROTOCOL 


This section introduces techniques for configuring a router’s interface to run EIGRP, EIGRP 
the Enhanced Interior Gateway Routing Protocol. EIGRP is an enhanced version of Enhanced Interior Gateway 
the Interior Gateway Routing Protocol (IGRP). EIGRP is a Cisco proprietary proto- Routing Protocol 
col and is often called a hybrid routing protocol that incorporates the best of the dis- 
tance vector and link-state algorithms. EIGRP calculates route metrics in a similar 
way as IGRP but uses a technique to improve the detail on metrics. 
EIGRP allows the use of variable length subnet masks, which is beneficial 
when you’re trying to conserve the uses of IP addresses. EIGRP also uses “Hello” 
packets to verify that a link from one router to another is still active. This is similar 
to the OSPF “Hello” packet described in section 7-10. The routing table updates are 
exchanged when there is a change in the network. In other words, the routers don’t 
exchange unnecessary information unless a route changes. This helps conserve the 
limited bandwidth of the network data link. When route information is exchanged, 
EIGRP quickly converges to the new route selection. 
The four components of EIGRP are as follows: 


e Neighbor Discovery Recovery: Used to learn about other routers on directly 
attached networks. This is also used to discover whether neighbor routers are 
unreachable. This discovery is accomplished by periodically sending “Hello” 
packets. The “Hello” packets are used to verify that a neighbor router is func- 
tioning. 

e Reliable Transport Protocol: Used to guarantee delivery of EIGRP packets to 
neighbor routers. Both unicast and multicast packet transmission are supported. 

e DUAL Finite State Machine: Used to track all routes advertised by its neigh- 
bors and is used for route computation to obtain loop-free routing. 

e Protocol Dependent Modules: Responsible for handling network layer, pro- 
tocol-specific requirements. For example, the IP-EIGRP module is responsible 
for extracting information from the EIGRP packets and passing this informa- 
tion to DUAL. DUAL uses this information to make routing decisions, and IP- 
EIGRP then redistributes the learned routes. 


Configuring Routes with EIGRP 


This section describes a procedure for configuring EIGRP on a router. The first ex- 
ample is for configuring RouterA in the campus LAN shown in Figure 7-13. 
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FIGURE 7-13 The three-router campus LAN. 
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Router B Port Addresses (LAN B Router B Port Addresses (LAN C Router Port Addresses (LAN D 


FastEthernet 0/0 10.10.5.250 
(Gateway Address) 
FastEthernet 0/1 


FastEthernet 0/2 


10.10.1.250 


10.10.150.2 
10.10.100.2 


10.10.200.2 
10.10.150.1 
LAN D Computers 


Computer D1 
Computer D2 


10.10.5.1 
10.10.5.2 


10.10.1.1 
10.10.1.2 


255.255.255.0 | Subnet Mask 255.255.255.0 


The three routers in the campus LAN will be configured to run EIGRP. The first 
step is to configure the interfaces on each of the three routers. The IP addresses and 
the subnet masks for the router interfaces are as follows: 


RouterA 


FA0/0 
FAO/1 
FAO/2 


RouterB 


FA0/0 
FAO/1 
FAO/2 
FAO/3 


RouterC 


FA0/0 
FAO/1 
FAO/2 


10.10.20.250 
10.10.200.1 
10.10.100.1 


10.10.10.250 
10.10.1.250 
10.10.200.2 
10.10.150.1 


10.10.5.250 
10.10.150.2 
10.10.100.2 


299:259:209.0) 
233.233.233.0 
253.233.293.0 


293.239.293.0 
255.255.235.0 
233.233.233.0 
235.255:239.0 


29929329A 
299,2392 
255.255.255.0 


After configuring the router interfaces, the EIGRP routing protocol for 
RouterA will be configured. Use the conf t command to enter the router’s configura- 
tion mode. Next enter the command router eigrp [AS number]. The AS number is the 
same as that for the IGRP routing protocol: Any AS number can be used. The router 
uses the AS numbers to determine which routers share routing tables. Only routers 
with the same AS number will share routing updates The command router eigrp 150 
is entered as shown. The prompt changes to (config-router) and the next command 
entered sets the network to run EIGRP. In this example, the command network 
10.0.0.0 is entered. This instructs the router to run EIGRP on any of the router’s in- 
terfaces that have an IP address that begins with 10. A different network command 
will be used on RouterB to show how the command can be used to specify a limited 
IP address range. 


RouterA(config)#router eigrp 150 
RouterA(config-router)#network 10.6.0. 


Now the 10.x.x.x interfaces on RouterA are configured to run EIGRP. The com- 
mand sh ip protocol is entered to verify that the EIGRP routing protocol is enabled 
on RouterA. 


RouterA# sh ip protocol 

Routing Protocol is "eigrp 150" 

Outgoing update filter list for all interfaces is Incoming update filter 
list for all interfaces is Default networks flagged in outgoing 
updates Default networks accepted from incoming updates EIGRP metric 
weight K1 1, K2 @, K3 1, K4 0, K5 0 

EIGRP maximum hopcount 100 

EIGRP maximum metric variance 1 

Redistributing: eigrp 150 

Automatic network summarization is in effect 

Routing for Networks: 

10.0.0.0 

Routing Information Sources: 

Gateway Distance Last Update 

10.10.200.2 90 00:00:09 

Distance: internal 90 external 170 


The top line states that the routing protocol is “eigrp 150” and indicates that it 
has been nine seconds since the last update to the routing table. In EIGRP, updates to 
the routing table are made when there are changes in the network. 

Another useful command is sh ip route. The following are the results of enter- 
ing the command. In this case, the router does not show any EIGRP routes to the sub- 
nets in the network because EIGRP has not been configured on RouterB or RouterC. 


RouterA#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 3 subnets 

C 10.10.20.@ is directly connected, FastEthernet0/Q 

C 10.10.200.@ is directly connected, FastEthernetQ/1 

C 10.10.100.@ is directly connected, FastEthernet®/2 
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The command sh ip int brief is entered and the status and protocols for the Eth- 
ernet interfaces are up. These will show up as long as there is a network connection 
to the interfaces. 


RouterA#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet®/0 10.10.20.250 YES NVRAM up up 
FastEthernet0/1 10.10.200.1 YES manual up up 
FastEthernet0/2 10.10.100.1 YES manual up up 


The sh run command is used to view the contents of the router’s running-con- 
figuration file. The following shows the part of the configuration file that shows the 
entries for EIGRP. Notice that these entries are the same as the commands entered 
earlier when configuring EIGRP. 


router eigrp 150 


network 10.0.0. 
l 


The next step is to configure RouterB. The configuration mode (config)# for 
RouterB is entered and the command router eigrp 150 is entered. Remember, 150 is 
the AS number, which is the same number used when configuring RouterA. The next 
command is used to set the network that is running EIGRP. In this case, the command 
network 10.10.0.0 is entered. This means that on RouterB, all interfaces with a 
10.10.x.x address will run the EIGRP protocol. In this case, all interfaces on RouterB 
have a 10.10.x.x address and will run EIGRP. 


RouterB#conf t 
Enter configuration commands, one per line. End with CNTL/Z. 


RouterB(config)#router eigrp 150 
RouterB(config-router)#network 10.10.0.0 


The command sh ip protocol is used to verify that EIGRP is running on 
RouterB. The text shows that eigrp 150 is running on RouterB and it has been 27 sec- 
onds since the last update to the routing table. 


RouterB#sh ip protocol 

Routing Protocol is "eigrp 150" 

Outgoing update filter list for all interfaces is Incoming update filter 
list for all interfaces is Default networks flagged in outgoing 
updates Default networks accepted from incoming updates EIGRP metric 
weight K1 1, K2 @, K3 1, K4 0, K5 @ 

EIGRP maximum hopcount 100 

EIGRP maximum metric variance 1 

Redistributing: eigrp 150 

Automatic network summarization is in effect 

Routing for Networks: 

10.0.0.0 

Routing Information Sources: 

Gateway Distance Last Update 

10.10.200.1 90 00:00:27 

Distance: internal 90 external 170 


The sh ip route command for RouterB shows that six routes are on RouterB 
and there are EIGRP routes to the 10.10.20.0 and 10.10.100.0 subnets. The code for 
the EIGRP routes is “D.” Remember, the “C” code is for the subnets directly con- 
nected to the router. 

RouterB#sh ip route 


Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 
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N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 6 subnets 

C 10.10.10.@ is directly connected, FastEthernet0/0 

10.10.1.@ is directly connected, FastEthernetQ/1 

10.10.20.0 [90/2195456] via 10.10.200.1, 00:00:09, FastEthernet®/2 
10.10.100.0 [90/2681856] via 10.10.200.1, 00:00:09, FastEthernet0/2 
10.10.15@.0 is directly connected, FastEthernet0/3 

10.10.200.0 is directly connected, FastEthernetQ/2 


oem =e) 


A check of the IP routes on RouterA also shows that RouterA and RouterB are 
exchanging routes with each other. RouterA now shows six subnets. Once again, the 
“D” indicates the EIGRP routes and the “C” indicates the directly connected subnets. 


RouterA#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

N1 OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

U per-user static route, o ODR T traffic engineered route 

Gateway of last resort is not set 

10.0.0.0/24 is subnetted, 6 subnets 

D 10.10.10.0 [90/2195456] via 10.10.200.2, 00:00:50, FastEthernetdO/1 

10.10.1.@ [90/2195456] via 10.10.200.2, 00:00:50, FastEthernetdO/1 

10.10.20.0 is directly connected, FastEthernet0/0 

10.10.10@.0 is directly connected, FastEthernetQ/2 


10.10.150.0 [90/2681856] via 10.10.200.2, 00:00:50, FastEthernetd/1 
10.10.200.0 is directly connected, FastEthernetQO/1 


QOnundaO UO 


The last step is to configure EIGRP for RouterC using the router eigrp 150 
command. The command network 10.10.0.0 is used to instruct the router to assign 
EIGRP to all interfaces that are under the 10.10.0.0 network. In this case, all inter- 
faces on RouterC have a 10.10.x.x address and therefore will run EIGRP. 


RouterC(config)#router eigrp 150 
RouterC(config-router)#network 10.10.0.0 


The sh ip route command is used to display the IP routes for RouterC. RouterC 
shows seven subnets. In fact, there are seven subnets in the campus LAN shown in 
Figure 7-13. This completes the setup for running EIGRP on the campus LAN. 


RouterC#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D EIGRP, EX 
EIGRP external, O OSPF, IA OSPF inter area 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 

Gateway of last resort is not set 

10.0.0.@ 255.255.255.0 is subnetted, 7 subnets 

C 10.10.5.0 is directly connected, FastEthernet0/Q 

D 10.10.10.0 [90/2195456] via 10.10.150.1, 00:00:01, FastEthernet®O/1 

D 10.10.1.@ [90/2195456] via 10.10.150.1, 00:00:01, FastEthernetQ/1 

D 10.10.20.0 [90/2195456] via 10.10.100.1, 00:00:01, FastEthernet®/2 

C 10.10.100.@ is directly connected, FastEthernet®/2 

C 10.10.150.@ is directly connected, FastEthernetQ/1 

D 

[ 


10.10.200.0 [90/2681856] via 10.10.150.1, 00:00:01, FastEthernetO/1 
90/2681856] via 10.10.100.1, 00:00:01, FastEthernetd/2 
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JUNOS 
The operating system used 
by Juniper routers 
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Networking Challenge—EIGRP 


Use the router simulator software included with the text’s companion CD-ROM to 
demonstrate that you can configure EIGRP for RouterA in the campus LAN (the 
campus LAN is shown in Figure 7-13 and is displayed on the computer screen when 
the software is started). EIGRP has already been configured for RouterB and 
RouterC. Place the CD-ROM in your computer’s drive. Open the Net-Challenge 
folder and click Net-Challenge.exe. When the software is running, click the Select 
Router Challenge button to open a Select Router Challenge drop-down menu. Se- 
lect Chapter 7—EIGRP. This opens a checkbox that can be used to verify that you 
have completed all the tasks. 


Enter the privileged EXEC mode on the router. 
Enter the router configuration mode, Router(config). 
Set the hostname to RouterA. 
Configure the FastEthernet0/0 interface with the following: 
IP address 10.10.20.250 
Subnet mask 255.255.255.0 
Enable the FAO/O interface. 
6. Configure the FastEthernet0/1 interface with the following: 
IP address 10.10.200.1 
Subnet mask 255.255.255.0 
7. Enable the FAO/1 interface. 
8. Configure the FastEthernet0/2 interface with the following: 
IP address 10.10.100.1 
Subnet mask 255.255.255.0 
9. Enable the FAO/2 interface. 
10. Enable EIGRP with an AS number of 200. 
11. Enter the network command that enables EIGRP on the router. 
12. Use the sh ip int brief command to check the interface status. 
13. Use the sh ip protocol command to see whether EIGRP is running on RouterA. 
14. Use the sh ip route command to verify that the three FastEthernet ports are con- 
nected to RouterA. 
15. Use the sh run command to view the running-configuration file on RouterA. 
Verify that EIGRP is enabled and the proper network address is specified. 
16. Use the ping command to verify connection to the following interfaces: 
10.10.5.250 
10.10.150.1 
10.10.200.2 
10.10.100.2 
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7-8 CONFIGURING A JUNIPER ROUTER 


This section demonstrates the steps for basic configuration of a Juniper router. There 
are distinct differences between the Juniper router configuration compared to Cisco 
IOS; however, many of the steps and prompts are similar to Cisco router configura- 
tion, as you’ll learn. The operating system (OS) used by Juniper routers is called 
JUNOS. The JUNOS software has two different command modes: 


e Operational mode 
e Configuration mode 


Routing Protocols 


Operational Mode 


This is the first mode encountered after logging in to the Juniper router. This mode 
allows for the following: 


1. Monitoring network connectivity (for example, using the ping command) 
2. Troubleshooting the router interface and network connections 
3. Entry point for router configuration 


The following examples demonstrate the basic commands used in the opera- 
tional mode of the JUNOS command line interface (CLI). The connection to the Ju- 
niper router demonstrated in this section is being made via an ssh session (secure 
telnet); however, a console serial connection can also be made directly with the Ju- 
niper router, and this connection is used to make the initial router interface configu- 
rations. 
The first prompt displayed after connecting to the router asks for a password. {master} 
After you correctly enter the password, you enter the router’s {master} mode andthe The prompt indicating you 
router> prompt is displayed. The prompt for the CLI is the >, and the text preceding are in the master routing 
the > lists the names of the user and the router. In this case, the username is net- engine mode on a Juniper 


admin and the router name is noc. Juniper routers use the {master} prompt to indi- Ute" 
cate that you are in the master routing engine mode This prompt appears only when 

the Juniper router is equipped with two routing engines and the two engines are run- 

ning in a graceful switchover redundancy mode. 

The following shows an example of the prompts displayed after establishing 
the router connection. In this example the connection is made by net-admin and this 
user has superuser privileges. 

Password: 

{master} 

net -admin@noc> 

The question mark (?) is used for the universal help command in the Juniper 
OS (operating system). For example, the ? can be entered to see what options are 
available. It is not necessary to press Enter after typing the question mark. The fol- 
lowing is a list of the available commands available at the > prompt. 

net-admin@noc> ? 

Possible completions: 

clear Clear information in the system 
configure Manipulate software configuration information 
file Perform file operations 
help Provide help information 
mtrace Trace mtrace packets from source to receiver. 
monitor Real-time debugging 
ping Ping a remote target 
quit Exit the management session 
request Make system-level requests 
restart Restart a software process 
set Set CLI properties, date, time, craft display text 
show Show information about the system 
ssh Open a secure shell to another host 
start Start a software process 
telnet Telnet to another host 
test Diagnostic debugging commands 
traceroute Trace the route to a remote host 
net -admin@noc> 
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The question mark can also be added only after part of a command is entered. 
For example, the following is a partial listing of the options with the show ? com- 
mand. 


{master} 


net-admin@noc> show ? 
Possible completions: 


Accounting Show accounting profiles and records 

aps Show Automatic Protection Switching information 

arp Show system Address Resolution Protocol table 
entries 

as-path Show table of known autonomous system paths 

bfd Show Bidirectional Forwarding Detection information 
bgp Show Border Gateway Protocol information 
chassis Show chassis information 

class-of-service Show class-of-service (CoS) information 

cli Show command-line interface settings 
configuration Show current configuration 

connections Show circuit cross-connect connections 


The JUNOS operating system has another option that enables the user to enter 
only part of a command. With this feature, the incomplete command will be com- 
pleted by JUNOS 1f the user is still in the CLI mode. This means the user doesn’t have 
to remember the full command. JUNOS will fill in the expected text given the infor- 
mation obtained from the entered keystrokes. This is accomplished by entering a par- 
tial command then and pressing the spacebar or the tab key. For example, entering 
show in <spacebar> lists the remaining text of a possible matching command, 
nterfaces. Press Enter to accept the displayed text. The following is an example: 


net-admin@noc>show in <spacebar>terfaces <Enter> 


Physical interface: at-0/1/0, Enabled, Physical link is Up 
Interface index: 11, SNMP ifIndex: 65 
Link-level type: ATM-PVC, MTU: 4482, Clocking: Internal, SONET mode 
Speed: 0C12, Loopback: None, Payload scrambler: Enabled 
Device flags : Present Running 
Link flags : 0x01 
[...Output truncated... ] 


The following shows another example of entering an incomplete command 
where an ambiguous result can occur. For example, entering show c <spacebar> re- 
sults in an ambiguous result because there are three possible matching commands. In 
this case, the user must type more characters for JUNOS to recognize the desired 
command, or the user must type the complete command. 

net-admin@noc> show c<Space> 


'c' is ambiguous. 
Possible completions: 


chassis Show chassis information 

class-of-service Show class-of-service (CoS) information 

cli Show command-line interface settings 
configuration Show current configuration 

connections Show circuit cross-connect connections 


The next example demonstrates the results of entering the show version at the 
> prompt. This command can be used to show which version of the Juniper software 
is running on the router, and it also lists all the software suites installed on the router. 
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- JUNOS 7.6R2.6 built 2006-07-08 09:43:10 UTC 


{master} 
net-admin@noc> show version 


Hostname: noc 

Model: miQi 

JUNOS Base OS boot [7.6R2.6] 

JUNOS Base OS Software Suite [7.6R2.6] 

JUNOS Kernel Software Suite [7.6R2.6] 

JUNOS Packet Forwarding Engine Support (M7i/M101i) [7.6R2.6] 
JUNOS Routing Software Suite [7.6R2.6] 

JUNOS Online Documentation [7.6R2.6] 

JUNOS Crypto Software Suite [7.6R2.6] 


In this case, the router is running the Model: m10i software. The Juniper sys- 
tem is based on the Unix OS platform. It has a Free BSD Unix-based kernel with dif- 
ferent software systems handling different functions. For example, this listing shows 
that there is a JUNOS routing software suite, a packet forwarding engine, a crypto 
software suite, and other software. This individual software suite setup allows one 
feature to be updated (for example, router updates) without having to update the en- 
tire router box. 

The next example uses the show configuration command to display the Juniper 
router current configuration. This is analogous to entering the show running- 
configuration command on a Cisco router. 


{master} 
net -admin@noc>show configuration 


version 7.6R2.6; 


groups { 
re® { 
system { 
host-name checs-atm-reQ; 
backup-router 10.10.20.250 destination 10.10.10.5/24; 
l 
interfaces { 
fxp® { 
description "Out of Band Management interface reQ"; 
unit @ { 
family inet; 
T 
} 
i 
\ } 
rei { 
system { 


The re0 { and rel { .. notations identify the system configuration for the routing en- reO { and rei {... 

gines 0 and 1. (The location of the routing engines on a Juniper router are shown in This identifies the location 

Figure 7-14.) The statement Out of Band Management indicates that the FastEther- of the system configuration 
net0 (fxp0) interface is an additional interface that can be used to connect to the router text for the routing engines 
if the main network is down. The term in band refers to the primary network 

connection. 
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FIGURE 7-14 The physical interfaces on a Juniper router. 


PIC The Juniper router shown in Figure 7-14 shows several types of physical inter- 
Physical interface card face cards (PIC). Each interface plus its name are listed. The ge interfaces are giga- 
bit Ethernet. The multi-services card enables expanded services such as stateful 
firewall protection, network address translation, and other functions. The t3/ds3 card 
provides for a 44.736 Mbps data rate connection. The at is for Asynchronous Trans- 
mission Mode (ATM), and this example also shows oc-3 (155.52 Mbps) and oc-12 
(622.08 Mbps) connections. This router also has two routing engines; the duplicate 
engines are for redundancy. 
Network connectivity with other networking devices can be verified with the 
Juniper router by using the ping command as shown next. This command is being is- 
sued at the {master} mode. 


{master} 
net-admin@noc> ping 192.168.32.5 
{master} 
net -admin@noc-atm-re1i> ping 172.16.83.3 
PING 172.16.83.3 (172.16.83.3): 56 data bytes 
64 bytes from 172.16.83.3: icmp seq=0 ttl=62 time=1.493 ms 
64 bytes from 172.16.83. icmp seq=1 ttl=62 time=1.000 ms 
64 bytes from 172.16.83. icmp seq=2 ttl=62 time=1.096 ms 
64 bytes from 172.16.83. icmp seq=3 ttl=62 time=1.082 ms 
64 bytes from 172.16.83. icmp seq=4 ttl=62 time=1.417 ms 
64 bytes from 172.16.83. icmp seq=5 ttl=62 time=1.159 ms 
^C 

- 172.16.83.3 ping statistics --- 
Permanent Interfaces 6 packets transmitted, 6 packets received, 0% packet loss 
Defined to be either round-trip min/avg/max/stddev = 1.000/1.208/1.493/0.182 ms 
Management or Internal 


Ethernet interfaces 


WOWWWW WwW 


Router Configuration Mode 
Management Ethernet 
Interfaces There are two types of interfaces for the Juniper routers: 
This enables the router to 
establish both ssh and telnet 
connections 


e Permanent interfaces: Two types of permanent interfaces exist: 
e Management Ethernet Interface: This interface enables the router to 
establish both ssh and telnet connections. 
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e Internal Ethernet interface: This interface is the main communications Internal Ethernet 
link between the JUNOS software and the router’s packet forwarding Interfaces 
engines. The main communications 
e Transient interfaces: These interfaces receive and transmit the data packets to ‘Link between the JUNOS 
and from the network. They are located on the physical interface card and can S°ftware and the router's 
be inserted and removed at any time. These interfaces must be configured be- 


fore they can be used. Transient Interfaces 


The Juniper routers also have both a console and auxiliary serial port. The con- 
sole port is used to establish a serial terminal connection and is used for initial router 
configuration. The auxiliary port is used to connect to a modem and for remote ac- 
cess when there is a failure with the regular network connection. 


and transmit data to/from 
the network 


Displaying the Router Interfaces 


The command for displaying the router interfaces and their status is show interfaces 
brief. The following shows an example of using this command. 


{master} 
net-admin@noc> show interfaces brief 
Physical interface: ge-0/@/0, Enabled, Physical link is Up 
Description: Feed to Network -Backup 
Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, Loopback: Dis- 


abled, 

Source filtering: Disabled, Flow control: Enabled, Auto-negotiation: 
Enabled, 

Remote fault: Online 

Device flags : Present Running 

Interface flags: SNMP-Traps Internal: 0x4000 

Link flags : None 


Logical interface ge-0/0/0.0 
Description: Feed to Network -Backup 
Flags: SNMP-Traps Encapsulation: ENET2 
inet 172.16.35.12/30 


Physical interface: ge-0/1/0, Enabled, Physical link is Down 
Link-level type: Ethernet, MTU: 1514, Speed: 1000mbps, Loopback: Dis- 


abled, 

Source filtering: Disabled, Flow control: Enabled, Auto-negotiation: 
Enabled, 

Remote fault: Online 

Device flags : Present Running Down 

Interface flags: Hardware-Down SNMP-Traps Internal: @x4000 

Link flags : None 


Logical interface ge-0/1/0.0 
Description: Feed to Network -Backup 
Flags: SNMP-Traps Encapsulation: ENET2 
inet 192.168.12.7/30 


The ge-0/0/0 physical interface shows that it is enabled and the physical link is 
up. This indicates that the link can pass data packets. The ge-0/1/0 physical interface 
shows that it is down and the interface is disabled. This listing also shows logical in- 
terfaces for ge-0/0/0.0 and 0/1/0.0, which are defined by the IP addresses (inet) set 
for each interface. Notice that each of the two gigabit Ethernet interfaces (ge-0/1/0 
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packet forwarding engines. 


These interfaces both receive 
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and ge-0/0/0) have both a physical and a logical interface setting. The ge-#/#/# nota- 
tion for the physical interfaces is defined as follows: 


e Media type: ge (gigabit Ethernet). Other options for media type are Sonet (so), 
ATM (at), FastEthernet(fxp) 

e Slot number: 0 

e Slot number on the interface: 0 

e Port: 0 


The notation for the logical interface lists the media type, slot number, slot 
number for the interface, and port. It also shows a description, a flag for SNMP, and 
the IP address. 


Hostname Configuration 


The hostname on a Juniper router can be change by entering the configuration mode. 
First enter the configure command, which places you in the [edit] mode. Notice that 
the prompt now has a # after it, indicating you are in the configuration mode. Next, 
enter edit system which places you in the [edit system] mode. You change the host- 
name of the router using the set host-name < name > command. The following is an 
example where the hostname of the router is changed from router to Juniper. (Note: 
This change will not be implemented until the configuration is saved using the 
commit command.) 


net-admin@noc> configure 

[edit] 

net-admin@noc>#edit system 

[edit system] 

net-admin@noc># set host-name Juniper 
[edit system] 

net -admin@noc>#commit 

[edit system] 

net -admin@Juniper># 


Assigning an IP Address to an Interface 


The next example shows how an IP address is assigned to an interface. In this case, 
the interface is ge-0/0/0. 


net-admin@noc> configure 

[edit] 

net-admin@noc>#edit interfaces ge-0/0/0 

[edit interfaces ge-0/0/0] 
net-admin@noc>#edit unit Q@ 

[edit interfaces ge-0/0/®@ unit Q] 

net -admin@noc>#edit family inet 

[edit interfaces ge-0/0/@ unit @ family inet] 
net-admin@noc>#set address 192.168.1.1/24 
[edit interfaces ge-0/0/@ unit @ family inet] 
net -admin@noc># 


Static Route 


You can configure a static route on a Juniper router by entering the edit mode. The 
{master } [edit] prompts should be displayed after you enter this mode. The command 
edit routing-options static places you in the mode to configure the static route. The 
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prompt changes to {master}[edit routing-options static]. The following shows an 
example: 


{master}[edit] 
net-admin@noc# edit routing-options static 


{master}[edit routing-options static] 
net -admin@noc# 


The next step is to configure the static router. This simply requires you to enter 
destination IP address / {subnet — CIDR} and next-hop address. The following 
shows an example: 


{master}[edit routing-options static] 
net-admin@noc# # set route 172.16.32.81/32 next-hop 172.16.64.161 


{master}[edit routing-options static] 
net -admin@noc# 


RIP Configuration 


The following steps demonstrate the procedure for configuring the RIP routing pro- 
tocol on a Juniper router. The first step is to enter the configuration mode using the 
configure command as shown. The prompt then changes to [edit]. 

net -admin@noc>configure 

[edit] 

The next step is to enter the edit protocols command, which places the router 
in the [edit protocols] mode. Then, enter the command edit rip. The prompt changes 
to [edit protocols rip], which places the router in the mode for configuring the RIP 
routing protocol. 


net-admin@noc>edit protocols 
[edit protocols] 


net-admin@noc>#edit rip 
[edit protocols rip] 


The next steps are used to enable the advertising of RIP routing via specific 
interfaces. 


net-admin@noc>edit group neighbors 
[edit protocols rip group neighbors] 


user@host#set neighbor ge-0/0/0 
[edit protocols rip group neighbors] 


user@host#set neighbor ge-0/0/1 
[edit protocols rip group neighbors] 
user@host# 


The commit command is used to save software configuration changes to the commit 
configuration database, and it also activates the configuration on the router. Changes The command used to save 
to the configuration are not saved unless you issue the commit command. changes to the configuration 
file 


net-admin@noc# commit 
commit complete 
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Or do this to quit the commit the configuration and exit the configuration mode: 


[edit] 
commit and- quit net-admin@noc# commit and- quit 


The command used to save l 
commit complete 


the configuration and exit exiting configuration mode 
the configuration mode net -admin@noc> 


OSPF Configuration 


The next example examines configuring the OSPF routing protocol for the Juniper 
router. In this case, the current system configuration file is edited with the required 
information. The commands in the following OSPF script are set off with brackets 
({}. There is an open bracket at the beginning of each command level and a closing 
brace at the end for each open brace. The following is an example of how to config- 
ure an OSPF backbone that has two gigabit Ethernet interfaces. You must be in the 
[edit] mode, so enter the configure command. You enter the script after entering the 
configure mode, which has the [edit] prompt displayed. 


net-admin@noc> configure 


[edit] 
protocols { 
ospf { 
area 0.0.0.0 { 
interface ge-0/0/O { 
hello-interval 5; 
dead-interval 20; 
} 
interface ge-0/0/1 { 
hello-interval 5; 
dead-interval 20; 
} 
} 
} 
} 


This configuration is for the backbone (area 0.0.0.0). The two gigabit interfaces 
are ge-0/0/0 and ge-0/0/1. The “Hello” interval is being set to 5 seconds and the dead 
interval is being set to 20 seconds. The “Hello” interval is how often OSPF “Hello” 
packets are sent to other routers in the same area, and the dead interval is how much 
time can expire before the other routers in the area assume the router is dead or the 
link has failed. 
Another way to configure the same information for OSPF is shown next. This 
example produces the same result as previously presented for the OSPF routing, ex- 
cept everything is entered at the command line. Enter the [edit] mode using the 
configure command. Next, enter the set protocols command followed by the desired 
settings for the interface. The set protocols command and desired settings must be re- 
peated for each interface. Enter the command sequence commit and- quit to save the 
configuration and exit the configuration mode. 
net-admin@noc> configure 
[edit] 
user@host# set protocols ospf area 0.0.0.0 interface ge-0/0/0 hello- 
interval 5 dead-interval 20 

[edit] 

user@host# set protocols ospf area 0.0.0.0 interface ge-0/0/1 hello- 
interval 5 dead-interval 20 
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[edit] 
net-admin@noc# commit and- quit 


commit complete 
exiting configuration mode 
net-admin@noc> 


This section has provided a brief introduction to the steps for configuring Ju- 
niper routers and using the JUNOS CLI. More information on configuring Juniper 
routers can be obtained at the following Juniper Networks site. This site has a lot of 
support information for the various versions of the JUNOS CLI User Guide. 


http://www.juniper.net/techpubs/software/junos/ 


7-9 TFIP— TRIVIAL FILE TRANSFER PROTOCOL 


Trivial File Transfer Protocol (TFTP) is a simple file transfer protocol often used TFTP 
with routers and switches to save and reload the configuration files to and from a re- Trivial File Transfer Protocol 
mote server. The files are saved in case of equipment failure, for rebooting, or for up- 
grading or archiving the configuration files. It is not uncommon for the configuration 
files to be backed up daily. The backup is typically done automatically. Changes to 
router and switch configuration files can occur on a daily basis, and an automatic or 
regularly scheduled backup is a safe way to ensure the configuration files are 
archived. Isn’t it true that the configuration files can be saved to NVRAM? The an- 
swer 1s yes, but if there is a complete equipment failure the current router or switch 
configuration will be lost. Saving the configuration files to another machine is a safer 
way to prevent loss. The TFTP server is also used for updating and saving the Inter- 
network Operating System (IOS) files stored in flash. Examples of how to save and 
reload files stored on the TFTP server are demonstrated later in this section. 

TFTP uses port 69 to establish the network connection and the User Datagram 
Protocol (UDP) to transport the files. TFTP has no authentication or encryption capabil- 
ities and is not a secure transfer; therefore, it is recommended that file transfers should 
be limited to private networks. The IP addresses for private networks are as follows: 


10.0.0.0—10.255.255.255 
172.16.00-172.31.255.255 
192.168..0.0—192.168.255.255) 


Configuring TFTP 


Before you can save the router or switch configuration files you must install the TFTP 
server software on your computer. Many freeware and shareware TFTP software 
packages are available on the Internet. The available software can be found by search- 
ing for “tftp server” using your Internet search engine. (Note: You must have the 
TFTP software running on your computer for the file transfer to work.) Newer ver- 
sions of the router and switch IOS now support FTP in addition to TFTP for the file 
transfer. The advantage of FTP is that a secure file transfer can be established using, 
for example, SSH File Transfer Protocol (SFTP), while TFTP is not secure. Addi- 
tionally, FTP overcomes the 16 megabyte file transfer limit of some IOS versions. 
FTP file transfer sizes are not limited. 
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When you first set up the router or switch you must make sure it is on the same 
subnet as the TFTP server because you don’t have routing set up yet; therefore, the 
destination IPs for the router/switch and the TFTP server must be on the same sub- 
net. An example of this is provided in Figure 7-15. The IP address for RouterC has 
been configured to 192.168.10.1/28. The TFTP server software has been installed on 
computer, D2 and the IP address for computer D2 has been configured to 
192.168.10.5/28. This places RouterC and computer D2 (TFTP server) on the same 
subnet in the 192.168.10.0 network. Also note that both RouterC and computer D2 
are connected to the same switch. 


Router C 






IP 192.168.10.1/28 
MAC OOOF8F5D8740 


LAN D 


UUUUUUUE O f 


Switch 
































IP 192.168.10.5/28 
MAC Dell 0582AD 





FIGURE 7-15 An example of placing the router and the TFTP server on the same network. 


The following are the basic commands used to save and load files to and from 
the TFTP server. Abbreviated commands that are recognized by the Net-Challenge 
software are provided in brackets [ ]. Your first requirement is that you place the 
router in the privileged EXEC mode as shown. 


1. Enter the enable mode on your router. 


RouterC>enable 
Password: 


The router’s running-configuration file can be saved to the TFTP server using 
the following command. 


2. Save to the TFTP server. 


RouterC#copy running-config tftp [copy run tftp] 

Address or name of remote host []?192.168.10.5 

Destination filename [running-config]? <enter the filename to be saved> 
I! 


872 bytes copied in 5.176 secs (174 bytes/sec) 


272 —. Chapter7 e¢ Routing Protocols 


The router’s running-configuration file stored on the TFTP server can be re- 
loaded using the following command. 


3. Load from the TFTP server. 


RouterC#copy tftp running-config [copy tftp run] 

Address or name of remote host [ ]? 192.168.10.5 

Source filename [ ]? <enter the saved file name> 
Destination filename [running-config]? 

Accessing tftp://192.168.10.5/network-name... 

Loading network-name from 192.168.10.5 (via Ethernet): ! 
[OK - 872/1024 bytes] 


872 bytes copied in 4.400 secs (218 bytes/sec) 
router# 


Figures 7-16 to 7-18 are captured data files of the TFTP write process using the 
Finisar Surveyor demo protocol analyzer. Figure 7-16 shows the capture for packet 
2. The source is the router with an IP address of 192.168.10.1 and the destination is 
the TFTP server with an IP address of 192.168.10.5. The middle of Figure 7-16 shows 
that the User Datagram Protocol (UDP) is being used with a source port of 56401 and 
a destination port 69 (the Trivial File Transfer port). The bottom of Figure 7-16 shows 
that a write request has been requested. The filename is config, which is the destina- 
tion filename. The data is being transferred in the octet mode (also called the binary 
image transfer mode). In this mode, the data is transferred in one-byte units. 


Elapsed [sec] | Size | Destination Source Surmmar 


000000 0.655.510.120 64 OOOF8FSD8740 OO0F8F5D8740 LOOPBACK Receipt=0 


000001 
000002 
000003 
000004 
000005 
000006 
000007 
000008 


10.653.683.040 
19.696.837.720 
19,704,961,080 
19,707.427,.880 
19,708,614,640 
19,711,632,880 
19,712.675,760 
20,654,757,760 


64 
64 
64 
562 
64 
200 
64 
64 


OOOF8FSD8740 
192.168.10.5 
192.168.10.1 
192.168.10.5 
192.168.10.1 
192.168.10.5 
192.168.10.1 

OOOF8FSD8740 


OOOF8FSD8740 
192.168.10.1 
192.168.10.5 
192.168.10.1 
192.168.10.5 
192.168.10.1 
192.168.10.5 

OOOF8FSD8740 


LOOPBACK Receipt=0 

TFTP Write Request File = config 
TFTP Ack Packet (# 0) 

TFTP Data Packet (# 1) 

TFTP Ack Packet (# 1) 

TFTP Data Packet (# 2) 

TFTP Ack Packet (# 2) 
LOOPBACK Receipt=0 


User Datagram Protocol 
Cupp) 
Source Port 56401 
Length 23 bytes 
Checksum 0x893B (correct) 
[15 bytes of data] 














Trivial File Transfer 

Protoco 
Packet Opcode 2 (write Request) 
File Name config 
mode octet 

Data/FCs 


























FIGURE 7-16 A TFTP write request to port 69. 


Figure 7-17 (packet 3) shows that the TFTP server computer at source port (SP) 
1102 replies back to the router (destination port DP 56401). Note that the TFTP server 
is now using port 1102. Port 69 is used initially to establish the TFTP connection but 
the server will select an available port for the data transfer. 

The beginning of the data transfer is shown in Figure 7-18 in packet 4 (FID 
000004). The source port is 56401 (router) and the destination port is 1102 (TFTP 
server). The packet size of the initial data transfer is 562 bytes. The actual text of the 
data transfer is displayed at the bottom of Figure 7-18. Notice that the data transfer 
text is readable, which introduces security issues if the configuration data is being 
transferred over a network. 
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000000 
000001 
000002 
000003 
000004 
000005 
000006 
000007 
000008 


0.655.510.120 
10.653.683.040 
19.696.837.720 
19.704.961.080 
19.707.427.880 
19.708.614.640 
19,711,632,880 
19,712,675,760 
20,654,757,760 


a 
64 
64 
562 
64 
200 
64 
64 


OOOF8F5D8740 
OOOF8F5D8740 
192.168.10.5 
192.168.10.1 
192.168.10.5 
192.168.10.1 
192.168.10.5 
192.168.10.1 
OOOF8F5D8740 


Source 
OOOF8F5D8740 
OOOF8F5D8740 

192.168.10.1 
192.168.10.5 
192.168.10.1 
192.168.10.5 
192.168.10.1 
192.168.10.5 
OOOF8F5D8740 


Summary 

LOOPBACK Receipt=0 

LOOPBACK Receipt=0 

TFTP Write Request File = config 
TFTP Ack Packet (# 0) 

TFTP Data Packet (# 1) 

TFTP Ack Packet (# 1) 

TFTP Data Packet (# 2) 

TFTP Ack Packet (# 2) 
LOOPBACK Receipt=0 


Jiu 





192.168.10.1 
[12 bytes of data] 


Destination Address 


user Datagram Protocol 
CUDP) 
Destination Port 56401 
Length 12 bytes 
CheckSum 0xX89DB (Correct) 
[4 bytes of data] 

















Data (Data) 
Data [4 bytes] 
Data/Fcs 
Data/Padding 
Frame Check Sequence 

















[14 bytes] 
Ox24F6336C (Correct) 





FIGURE 7-17 A TFTP write request—port assignments. 





FID BookMark | Stat... | Ela [sec] Size Destination Source Summa w 
000001 10.653.683.040 64 OOOF8F5D8740 OOOF8F5D8740 LOOPBACK Receipt=0 
000002 19.696.837.720 64 192.168.10.5 192.168.10.1 TFTP Write Request File = config 4 
000003 19.704.961.080 64 192.168.10.1 192.168.10.5 TFTP Ack Packet (# 0) E 


ooooo4 | | | 119.707.427.880 eee] 192.168.10.5 192.168.10.1 TFTP Data Packet (# 1) 


000005 19.708.614.640 192.168.10.1 192.168.10.5 TFTP Ack Packet (# 1) 
000006 19,711,632,880 aa 192.168.10.5 192.168.10.1 TFTP Data Packet (# 2) {v 
Gi. 7 i E _ F R m — at i >) 














00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF ASCII 
A0- =-...].@. 
A60 ees jui. 

sti: N. 

Meena: 12. 2.5e 
rvice timestamps 
debug uptime.se 
rvice timestamps 
log uptime.no 5 
ervice password- 
encryption.!.hos 
tname Router.!.! 
-ip subnet-zero. 
l.l. l.l. l.l inte 
rface FastEthern 
eto/o. ip addres 
5 192.168.10.1 2 
55.255.255.0. du 
plex auto. speed 
auto. !.interfac 
e Serialo/o. no 
ip address. cloc 
krate 115200.!.7 
nterface Fasteth 
erneto/1. ip add 
ress 169.169.4.2 
255.255.255.0. 
duplex auto. spe 
ed auto.!.interf 
ace SerialO/i. n 
o ip address. cl 
ockrate 56000.!. 
ip classless.ip 
route 0.0.0.0 0. 
0.0.0 169.169.4. 
1.ip route 169.4 








FIGURE 7-18 A TFTP write request—data transfer. 


Networking Challenge—TFTP 


Use the Network Challenge V2.0 simulator software included with the text’s com- 
panion CD-ROM to demonstrate that you can configure TFTP from RouterC in the 
campus LAN to computer D2 in LAN D. Place the Network Challenge CD-ROM 
in your computer’s CD drive. Open the Networking Challenge folder and click 
NetChallenge.exe. When the software is running, click the Select Challenge button 
to open a Select Challenge drop-down menu. Select Chapter 7—TFTP. This opens 
a checkbox that can be used to verify that you have completed all the tasks. 


1. Enter the privileged EXEC mode on RouterC. Use the password Chile. (Note: 
Chile is pronounced “‘chill-a.”’) 
2. Enter the router configuration mode, RouterC(config). 
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oy 


10. 


11. 


12. 


13. 
14. 


Set the hostname to RouterC. 

Configure RouterC’s FastEthernet port 0/1 with an IP address of 192.168.12.5 
and a subnet mask of /28. 

Enable RouterC’s FastEthernet port 0/1. 

Verify that RouterC’s FastEthernet port 0/linterface is properly configured. 
Configure the IP address of the TFTP server, located on computer D2 in LAN 
D, to 192.168.12.1 with a /28 subnet mask. The gateway IP address is 
192.168.12.5. 

Verify that the TFTP server (computer D1) and RouterC have network connec- 
tivity. 

Use the proper command to copy the running-configuration on RouterC to the 
TFTP server (computer DI—LAN D). Use a filename of RC-tftp-12-5-06. If 
the command is not successful, check your configurations. 

Use the proper command to copy the RC-tftp-12-5-06 file from the TFTP server 
to the running-configuration on RouterC. 

Use the proper command to verify that the TFTP file has been copied onto 
RouterC. 

RouterC’s Cisco IOS must be updated to a newer version called c2600-d-1- 
12.5(3), which is located on the FTP server on computer D1 in LAN D. (Note: 
the character | is the letter 1.) Enter the proper command to install the newer IOS 
version stored on the TFTP server onto RouterC. 

Use the proper command to verify that RouterC’s IOS has been updated. 
RouterC’s Cisco IOS needs to be saved on the TFTP server on computer D1 in 
LAN D. Enter the proper command to save RouterC’s current [OS onto the 
TFTP server (Computer DI—LAND). 


7-10 ANALYZING OSPF “HELLO” PACKETS 


“Hello” packets are periodically sent in OSPF networks to initiate and maintain com- 
munications with neighbor routers. The “Hello” packets contain parameters includ- 
ing specifications for the following: 


e Network Mask: The mask contains 32 bits in four octets (8-bit groups). The 


masking is a logical “AND” operation, and the bits that are set high allow the 
address data to pass. For example, a network mask of 255.255.255.0 has the 
first 24 bits set high in the first three octets. The hexadecimal equivalent (base 
16) for this network mask is Oxffffff00. 

Hello Interval: The time between “Hello” packets. 

Router Dead Interval: The length of time a router neighbor is quiet (no 
“Hello” packets) before assuming the neighbor is dead. 


OSPF uses a class D multicast IP address to send out the “Hello” packets to the 


neighbors. OSPF networks have been assigned the multicast IP address of 224.0.0.5 
for sending “Hello” packets. Multicast IP addresses for use with multicast protocols 
are in the range of 224.0.0.0 to 239.255.255.255. This is called the class D IP address 
range. The IP address range above class D is called class E and addresses range from 
240.0.0.0 to 254.255.255.255. Class E is called the ZP address experimental range. 


Network Mask 
Hello Interval 
Router Dead Interval 
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RID The test network shown in Figure 7-19 was set up so that the transmission of 

Router ID OSPF “Hello” packets could be viewed. The Surveyor Demo protocol analyzer was 
installed on computer D1 in LAN D (192.168.1.0 NET). LAN D has been configured 
to be an OSPF advertised route; therefore, computers in LAN D will receive the 
OSPF multicasts used to capture the data packets. OSPF broadcasts the LAN address 
as part of the routed addresses. The multicast is sent to all neighbor OSPF router con- 
nections. The captured data packets for the network are shown in Figure 7-20. The 
highlighted line, beginning with the ID of “000001” in the first column, is the first 
detected occurrence of a data packet on the network. The elapsed time 1s 5.278.530.840 
seconds (column 2). The size of the packet is 82 bytes (column 3). The destination 
(specified in column 4) is an OSPFIGP_Router multicast. The source IP address is 
192.168.1.250, which is the IP address for the router interface. The packet summary 
(column 6) indicates this is an OSPF Hello from RID (router ID) 192.168.200.11. 







192.168.200.0 NET 


Routerc LE! (192.168.200.11) 


E0 (192.168.1.250) 


192.168.1.0 NET 


[@0 | [ẹo0000] |ẹ] 








Surveyor 
Demo 


FIGURE 7-19 The test network for capturing the OSPF “Hello” packets. 


OSPFIGP One of the complex things about OSPF is the assignment of the router ID 
Open Shortest Path First (RID). The router ID is an IP address chosen from all interfaces on the router. Cisco 
Interior Gateway Protocol IOS first examines the loopback address for the router’s ID IP address. If a loopback 


address is not being used, the highest IP address for a router interface is selected as 
the router ID. In this case, the highest loopback IP address is 192.168.200.11, the IP 
address for the E1 Ethernet interface. The middle panel in Figure 7-20 shows that the 
destination address is 224.0.0.5 and defines this as OSPFIGP_Router. OSPFIGP 
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stands for Open Shortest Path First Interior Gateway Protocol, which is a concate- IGP 

nated form of OSPF and IGP. The OSPF protocol is classified as an Interior Gateway Interior Gateway Protocol 
Protocol (IGP). IGP represents entities under the same autonomous domain (admin- 

istrative and security policies). Remember, when you specify the OSPF protocol, a 

process id number is entered; for example, router ospf 100. 




















TECLEAR EE 
H M M 4 > AT @ @ |Z) Display Fiker: | ~| |¥ak 8 
Elapsed [sec] | size | Destination | Source Summa s 
000000 0.270.025.840 64 Cisco 7F8147 Cisco 7F8147 LOOPBACK Receipt=0 
000001 5.278.530.840 82 OSPFIGP_Router 192,168,1,250 OSPF Hello RID=192,.168.200,11 
000002 10.269.991.480 64 Cisco 7F8147 Cisco 7F8147 LOOPBACK Receipt=0 
000003 15,278,539,200 82 OSPFIGP_Router 192,168,1,250 OSPF Hello RID=192,168,.200,11 
000004 20.269.820.520 64 Cisco 7F8147 Cisco 7F8147 LOOPBACK Receipt=0 
0000053 25.278.485.560 82 OSPFIGP_Router 192,168,1,250 OSPF Hello RID=192,168,200,11 v 
P m a 
Ce O IS 
Total Length 64 bytes 
Identification 33717 
El Flags/Fragment offset 0x0000 
> Osas cece cece coos Not Used 
> Use spee (96:65 “seers May Fragment 
> sels Snce ease, ses Last Fragment 
> ...0 0000 0000 0000 Fragment Offset: 0 bytes 
Time to Live 1 seconds/hops 
Protocol ID 89 (OSPF) 
Checksum 0x92 48 (Correct) 
Source Address 192.168.1.250 
[44 bytes of data] v| 
Hex 00 01 02 03 04 05 06 07 08 09 OA OB OC OD OE OF ASCII 
0000: 01 00 5E 00 OO 05 00 10 7B 7F 81 47 08 OO 45 CO aof eoese osae EA 
0010: 00 40 83 BS 00 00 01 59 92 48 CO AGB 01 FA GO| .c.p...Y.HA”. iEn 
eons’ 


0020: | Mo 01 oo 2c CO AB CB OB OO OO 00 59 BO EE W. ..,à È 
0030: | 00 00 00 00 00 00 00 00 OO OO FF FF FF 00 00 DA | ....... KEE 
0040: | 02 01 00 00 00 28 CO AS 01 FA 00 00 00 00 61 A6 | ..... CA” .f....a! 


FIGURE 7-20 The captured OSPF multicasts. 


The bottom panel in Figure 7-20 is the actual data packet displayed in hexa- 
decimal (base 16) code. The highlighted hex code is 


E0000005 


This is the hexadecimal value for 224.0.0.5, the destination IP address of the 
multicast. 


Hexadecimal Value E 0 00 00 05 
Decimal Equivalent 224 0 0 5 


Note: The decimal equivalent of EO is 14, and (14 x 16 + 0) = 224. 

A detailed view of the OSPF packet information is provided in Figure 7-21. 
This information is available in the Open Shortest Path First (OSPF) window as 
shown in Figure 7-21. 

In addition to the version number, the router ID is listed (192.168.200.11), and 
the hello interval is specified to be 10 seconds. Looking again at Figure 7-21, the 
OSPF “Hello” packets are approximately 10 seconds apart. The router dead interval 
is 40 seconds. 

This section has demonstrated how to use the Surveyor Demo Protocol Ana- 
lyzer to capture OSPF “Hello” packets. Figures 7-20 and 7-21 and the accompany- 
ing text explained how to extract information from the captured packets. 
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= Open Shortest Path First 
(OSPF) 


Version 2 

Type 1 CHello) 

Length 44 bytes 

Router ID 192.168.200.11 

Area ID 0.0.0.89 

Checksum OxBOEE 

AuType o (Null Authentication) 

Authentication o000000000000000 

Network Mask 255.255.255.0 

Hello Interval 10 seconds 

Optional Capabilities 0x02 

> ‘ee voss Not Used (MBZ) 
Opaque-LSAs NOT Forwarded 
Demand Circuit Bit 
External Attributes Bit 
No NSSA Capability 
No Multicast Capability 
seso wets External Routing Capability 
> sete oco No Type of Service Routing Capability 

Router Priority 

Router Dead Interval 40 seconds 

Designated Router 192.168.1.250 

Backup Designated Router 0.0.0.0 





FIGURE 7-21 A detailed view of the OSPF packet information. 
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SUMMARY 


This chapter presented examples of configuring routing protocols. The network chal- 
lenge exercises provided the opportunity for the student to test her or his configura- 
tion skill prior to actually configuring a real router. The student should be able to 
configure and verify operation of the following protocols: 


Static 
RIP 
IGRP 
OSPF 
EIGRP 


Additionally, this chapter examined the steps for configuring a Juniper router 
and how to set up and communicate with a TFTP server. The last section examined 
the OSPF “Hello” packets. 


QUESTIONS AND PROBLEMS 


Section 7-2 


What is a routing table? 

What is the most common static route used in a host computer? 

What command is used to view a PC computer’s routing table? 

What is meant by a 0.0.0.0 network address entry with a subnet mask of 0.0.0.0 
in a PC’s routing table? 

What is the 127.0.0.1 IP address and what is it used for? 

6. What is the router command to configure a static route from LAN A to LAN B 
for the network shown in Figure 7-22? 


oe 


n 


10.10.100.0 NET 













M Prd 
10.10.100.1 10.10.100.2 
Subnet Mask 


10.10.50.0 NET 255.255.255.0 10.10.80.0 NET 





FIGURE 7-22 The network for problem 6. 


7. What is the difference between a router’s running-configuration and startup- 
configuration? 

8. What is the router command used to view the routes entered into the router’s 
routing table? 

9. What is the router command used to configure a static route for a router? 
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10. List two static routes to route data from LAN A to LAN C. The network is 
shown in Figure 7-23. Assume a subnet mask of 255.255.255.0. 


10.10.10.0 NET 







10.10.10.1 





Router2 






10.20.100.1 10.20.100.2 10.50.10.1 






10.50.10.2 ¥ « ROUTER3 


Router 


LAN A 


10.10.100.1 10.10.16.1 10.10.200.1 


FIGURE 7-23 The network for problems 10 through 13. 


11. List two static routes to route data from LAN B to LAN C in Figure 7-23. As- 
sume a subnet mask of 255.255.255.0. 
12. Which of the following are suitable subnet masks for use in configuring static 
routes for the network shown in Figure 7-23? 
a. 255.255.0.0 
b. 255.0.0.0 
c. 255.255.255.224 
d. All the above 
e. None of the above 
13. A static route is configured to route data from LAN A to LAN B on Router! in 
Figure 7-23. Which of the following are appropriate static routes to achieve this 
goal? 
a. ip route 10.10.16.0 255.255.255.255 10.20.100.2 
b. ip route 10.10.16.0 255.255.255.0 10.20.100.2 
c. ip route 10.10.16.0 255.255.255.255 10.10.10.2 
d. ip route 10.10.16.0 255.255.0.0 10.10.10.2 
Subnet masks on A and C are not appropriate 





Section 7-3 


14. What is the difference between a static and a dynamic routing protocol? 
15. What are the four key issues in dynamic routing protocols? 
16. Define hop count. 
17. Which of the following is not a metric used in dynamic routing protocols? 
a. Hop count 
b. Cost 
c. Runs 
d. Ticks 
18. A distance vector protocol typically uses what as the metric? 
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19. Determine the hop count for Router2 to subnet B in Figure 7-24. 






A, B, C, E, F, G, H, I 
are segments. 


FIGURE 7-24 The network for problems 19 through 21. 


20. For Figure 7-24, what is the hop count from Router5 to subnet G? 
21. For Figure 7-24, what is the hop count from Router3 to subnet A? 
22. Link state protocols issue what to update neighbor routers regarding route 
status? 
a. Hop status 
b. Link state advertisements 
c. “Hello” packets 
d. Adjacencies 
23. Which of the following are key issues of link state protocols? 
a. Send updates every 90 seconds 
b. Send update when routing changes 
c. Use link lights to establish adjacencies 
d. Use a hop count metric to determine the best route to a destination 


Section 7-4 


24. RIP is classified as a 
a. Distance vector protocol 
Dynamic routing protocol 
Link state protocol 
aandc 
a and b 
f. bandc 
25. Define routing loops. 
26. Which of the following are examples of classful addresses? 
a. 10.10.0.0 
b. 192.168.0.0 
c. 10.1.0.0 
d. 10.0.0.0 
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27. What is the router command to enable the RIP routing protocol on a router? 
a. config router RIP 
b. router rip 
c. rip 10.0.0.0 
d. network 10.0.0.0 

28. What does it mean to advertise a network? 

29. The network shown in Figure 7-25 is an example of which of the following? 
a. Contiguous network 
b. Discontiguous network 


10.10.20.0 NET 10.10.100.0 NET 


192.168.10.0 NET 





FIGURE 7-25 The network for problem 29. 


30. Write the commands to enable RIP on an interface with an IP address of 
192.168.10.0. 

31. The command show ip protocol is used on a router to 

a. Display the routing protocol that can run on the router 

b. Display the IP address of the routers running an IP protocol 

c. Display the routing protocols running on the router 

d. None of the above 
32. The command show ip interface brief is used on a router to 

a. Check the current configuration of the interfaces 

b. Check the assigned IP addresses for the interface 

c. Check the status of the interfaces 

d. All the above 

e. None of the above 
33. The command show ip route is used on a router to 

a. Set a static route 

b. Configure a static route 

c. Display the configured routes on a router 

d. Display how often routing updates are sent 

e. Cand D 
f. B and D 
e 
a. 





34. The command used to display the router’s current running-configuration is 
show run 
b. show routing 
c. show interface 
d. show controller 


Section 7-5 


35. How is the IGRP similar to RIP? 
36. What improvements does IGRP provide relative to RIP? 
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37. The command for specifying the IGRP routing protocol on a router is 
a. router igrp [0#] 
b. router igrp [as number] 
c. router igrp 
d. router igrp [FF] 
38. You can verify that the IGRP routing protocol is running on a router by using 
the command 
a. show run 
b. show ip int brief 
c. Show flash 
d. show ip protocol 
39. The router command used to copy the running-configuration to NVRAM is 
a. copy run tftp 
b. copy run start 
c. copy run flash 
d. copy run show 
40. What information does show ip route igrp provide? 
a. View the routing table for only the IGRP protocol 
b. View the routing table for all protocols except IGRP 
c. Enable IP routing with IGRP 
d. Instruct the router to use IP routing 
41. What is the router command for displaying the startup-configuration? 
a. show run 
b. show flash 
c. show history 
d. show start 


Section 7-6 


42. OSPF is (select all that apply) 
Open Shortest Path First routing protocol 
An open protocol 
Developed specifically for TCP/IP networks 
. Developed specifically for IPX networks 
. A distance vector protocol 
A dynamic routing protocol 
. A link state protocol 
. A high consumer of bandwidth 
43. In OSPF, route updates are sent in the form of 
a. Link state advertisements 
b. Exchanging routing tables every 30 seconds 
c. Exchanging routing tables every 90 seconds 
d. IETF packets 
44. The OSPF routing protocol uses these to verify that a link between two routers 
is active and the routers are communicating: 
a. LSAs 
b. “Hello” packets 
c. ARP messages 
d. Ping 
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53: 


54. 


55. 


45. 


46. 


47. 


48. 
49. 


50. 


SI; 


32; 


Areas in the OSPF protocol are 
a. Not used 
b. Used to partition a large network into small networks 
c. Used to combine small networks into one large network 
d. An inefficient use of bandwidth 
Variable length subnet masks 
a. Minimize wasted IP address space when interconnecting subnets 
b. Are not recommended in modern computer networks 
c. Reduce the number of bits required in a subnet mask from 32 to 24 
d. Are the same as classful addressing 
Which is not an advantage of OSPF? 
a. Very easy to implement 
b. Uses VLSM 
c. Link state changes are immediately reported 
d. Not a proprietary protocol 
Define router flapping. 
The command structure for enabling OSPF routing on a router is 
a. router ospf 
b. router ospf [area] 
c. routing protocol ospf 
d. router ospf [number] 
Another name for wild card bits is 
a. OSPF pass-through bits 
b. Area 0 selection bits 
c. Inverse mask bits 
d. Route selection bits 
Area 0 is 
a. Used to hide data packets 
b. Root or backbone for the network 
c. Inverse mask bits 
d. Route selection bits 
Which of the following is not a correct statement for configuring a route to run 
over OSPF? Assume that the OSPF protocol has been enabled. 
a. network 10.10.20.1 1.1.1.1 area O 
b. network 10.10.20.1 1.0.0.0 area 0 
c. network 10.0.0.0 1.0.0.0 
d. network 10.10.100.1 0.0.0.0 area 0 
The command show ip route ospf 
a. Is not valid in OSPF 
b. Displays only the IP routes 
c. Displays only the OSPF routes 
d. Enables OSPF routing 
The sh ip route command is entered on RouterB in the campus LAN shown in 
Figure 7-12. The LAN has been fully configured to run the OSPF protocol. 
a. How many OSPF subnets are running on the network? 
b. Identify the connected C and OSPF O subnets. 
The sh ip route command is entered on RouterC in the campus LAN shown in 
Figure 7-12. The LAN has been fully configured to run the OSPF protocol. 
a. How many OSPF subnets are running on the network? 
b. Identify the connected C and OSPF O subnets. 
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Section 7-7 


56. EIGRP stands for 
a. Enhanced Interior Routing Protocol 
b. Enhanced Interior Gateway Routing Protocol 
c. Enhanced Internet Gateway Routing Protocol 
d. None of the above 
57. The command for enabling EIGRP on a router is 
a. router igrp [as number] 
b. router eigrp 
c. router eigrp [as number] 
d. router eigrp enable 
58. The command network 10.10.0.0 is entered on a router after EIGRP has been 
enabled. Define what this means. 
59. What router command can be used to verify EIGRP is running on the router? 
a. show run 
b. show ip int brief 
c. Show history 
d. show ip protocol 
60. What router command will show how many subnets are configured? 
a. show run 
b. show ip int brief 
c. show list 
d. show ip route 
61. What router command will show whether the router is exchanging routes? 
a. show run 
b. show ip int brief 
c. show list 
d. show ip route 
62. The sh ip route command is entered on RouterA in the campus LAN shown in 
Figure 7-13. The LAN has been fully configured to run the EIGRP protocol. 
a. How many EIGRP subnets are running on the network? 
b. Identify the connected C and EIGRP D subnets. 
63. The sh ip route command is entered on RouterB in the campus LAN shown in 
Figure 7-13. The LAN has been fully configured to run the EIGRP protocol. 
a. How many EIGRP subnets are running on the network? 
b. Identify the connected C and EIGRP D subnets. 





Section 7-8 


64. What are the two command modes for the JUNOS operating system? 

65. What does the {master} prompt indicate in JUNOS? 

66. What does the net-admin@noc> prompt indicate in JUNOS? 

67. What is the help command in JUNOS? 

68. What does it mean if the following is displayed after entering the show 
interfaces command? 
Physical interface: at-0/1/0, Enabled, Physical link is Up 

69. What is the command used to display the Juniper router current configuration? 
Show the proper prompt for the command. 
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70. The following is displayed after entering the show configuration command. 
What does re0 { represent? 


{master} 
net-admin@noc>show configuration 
version 7.6R2.6; 


groups { 
re@ { 
system { 

host-name checs-atm-reQ; 
backup-router 10.10.20.250 destination 10.10.10.5/24; 
} 

} 
} 


71. What is meant by out of band management ? 

72. What is a management Ethernet interface? 

73. What is an internal Ethernet interface? 

74. What are transient interfaces? 

75. What is the command for displaying the router interfaces and their status? 

76. What is the command sequence to change the hostname on a Juniper router to 
Piyasat? 

77. Can the following command sequence be used to change the IP address on an 
interface? Why or why not? 


net-admin@noc> configure 

[edit] 

net-admin@noc>#edit interfaces ge-0/0/0 

[edit interfaces ge-0/0/0] 

net -admin@noc>#edit unit 0 

[edit interfaces ge-0/0/0@ unit Q] 
net-admin@noc>#edit family inet 

[edit interfaces ge-0@/0/0 unit @ family inet] 
net-admin@noc>#set address 192.168.1.1/24 
[edit interfaces ge-0/0/0 unit @ family inet] 
net -admin@noc># 


78. What is the correct command for configuring a static route on a Juniper router 
given a destination of 216.234.214.82 with a subnet mask of 255.255.255.255 

} | and the next hop is 216.31.32.161? 

| 79. (a) What command is used to save a configuration in JUNOS? (b) What com- 
mand sequence saves the JUNOS configuration and exits the configuration 
mode? 

80. Write the script (with braces { ) for the following command sequence for 
OSPF: 


net-admin@noc> configure 
[edit] 
user@host# set protocols ospf area 10.0.0.0 interface at-0/0/0 hello- 
interval 10 dead-interval 40 
[edit] 


user@host# set protocols ospf area 10.0.0.0 interface ge-0/0/1 hello- 
interval 10 dead-interval 40 





286 Chapter 7 e¢ Routing Protocols 


SS 


Section 7-9 


81. What port does TFTP use? 

82. List the command and prompt used to save a router configuration file to the 
TFTP server. 

83. List the command and prompt used to load a save configuration file from the 
TFTP server. 

84. Use the Finisar Surveyor demo software to capture a file transfer to a TFTP 
server. Prepare a report on your findings. Identify the port used to establish the 
TFTP transfer and the source and destination ports used for the TFTP file trans- 
fer. 

85. Repeat problem 84 for loading a file from a TFTP server. 


Section 7-10 


86. The hello interval is 
a. The time between “Hello” packets 
b. The timing of the “Hello” header 
c. The timing of the router dead interval 
d. None of the above 
87. OSPF multicasts are sent out as what class of address? 
a. Class A 
b. Class B 
c. Class C 
d. Class D 
e. Class E 
88. OSPF “Hello” packets are sent out every 
a. 30 seconds 
b. 90 seconds 
c. 10 seconds 
d. None of the above 
89. The Router ID (RID) in OSPF “Hello” packets is chosen from 
a. Loopback addresses 
OSPF 16P_Router 
Highest IP address on an interface 
aandc 
b and c 





oro. S 


Critical Thinking 


90. You are configuring a router connection to a remote network. What protocol 
would you select if there is only one network route to the remote network? Ex- 
plain why you selected the protocol. 

91. You are configuring the routing protocols for a small network. What routing 
protocol would you select and why? 
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8-1 Introduction 
8-2 The Line Connection 


8-3 Frame Relay 


8-4 ATM 
8-5 Dial-in Access 
8-6 VPN 


OBJECTIVES 


Describe line coding and framing format 
Describe the function of the CSU/DSU 
Describe how to create a Frame Relay con- 
nection 

Demonstrate the configuration for a point-to- 
point connection 

Discuss the ATM mode of operation 


8-7 Wide Area Network Routing 
8-8 Internet Routing 

8-9 Analyzing Internet Data Traffic 
Summary 


Questions and Problems 


Describe how to configure dial-in access 
Describe how to configure a VPN tunnel 
Describe how to establish computer-to-server 
VPN connections 

Describe the different types of WAN connec- 
tions 

Describe the steps for configuring Internet 





Describe a wide area network 


KEY TERMS 


routing 


wide area network (WAN) minimum ones density 
HSSI bipolar violation 

OC HDLC 

DS-0 to DS-3, T1 to T3 PPP 

DS Frame Relay network 
telco public data network 


telco cloud 


X.25 


multiplexed committed information 
fractional T1 rate (CIR) 

switch-56 bursty 

point of presence (POP) committed burst informa- 
line of demarcation tion rate (CBIR) 
CSU/DSU PVCs 

D4 framing Frame Relay cloud 
ESF dici tag 

AMI ATM 

bipolar coding packet switching 
B8ZS payload 


virtual path connection 
(VPC) 

virtual channel connection 
(VCC) 

SVC 

VPI 

VCI 

V.44/V.34 

V.92/V.90 
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cable modem 

ranging 
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xDSL 

DSL 
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discrete multitone (DMT) 
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continues 


289 











290 


KEY TERMS continued 


DHCP 

VPN 

IP tunnel 
PPTP 

L2TP 

IPsec 
stubby areas 
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totally stubby areas 
BGP 

multi-homed 

AS 

ASN 

peering 

iBGP 


eBGP 
NOC 


outbound data 
traffic 


inbound data traffic 
IPX 


8-1 INTRODUCTION 

This chapter examines the concepts for establishing wide area network (WAN) con- 
nections. WANs use the telecommunication network to interconnect sites that are ge- 
ographically distributed throughout a region, the country, or even the world. 
Connections can include extensions of the campus LAN to remote members of the 
network. For example, the corporate office for a company could be located in one part 
of a state and the engineering, manufacturing, and sales sites could be at different lo- 
cations in the state. An example of a WAN is shown in Figure 8-1. The wide area net- 
work in this example shows connections for the Internet, a Frame Relay network, a 
Virtual Private Network (VPN), and dial-in access through a remote access server. 
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FIGURE 8-1 An example of a wide area network. 


This chapter examines each of these wide area networking technologies. An in- 
troduction to setting up a connection to the communications carrier is examined in 
section 8-2. The Channel Service Unit/Data Service Unit (CSU/DSU), serial line 
clocking, and line coding formats are examined. The important concept of configur- 
ing Frame Relay networks is next examined in section 8-3. This section includes an 
example of configuring a Frame Relay network within a simulated Telco “cloud.” 

Section 8-4 examines the asynchronous transfer mode (ATM) and its important 
role in carrying high-speed data traffic around the country and the world. Wide area 
networking is not complete without dial-in access for the user. Section 8-5 examines 
establishing a point-to-point dial-in connection using a phone modem, cable modem, 
Digital Subscriber Line (DSL) service, and other technologies. Section 8-5 concludes 
with an example of configuring a remote access server to accept dial-in connections. 


Section 8-1 


Wide Area Network 
(WAN) 

Uses the telecommunication 
network to interconnect sites 
that are geographically 
distributed throughout a 
region, the country, or the 
world 
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Creating virtual private networks (VPNs) is examined in section 8-6. The steps 
for creating a VPN tunnel are examined and the section concludes with steps for con- 
figuring a VPN connection on a router-to-router tunnel and configuring a VPN remote 
client. An overview of the issues of wide area network routing is presented in section 
8-7. The protocols used for routing Internet data traffic are examined in section 8-8. 
The chapter concludes with an example of using the Surveyor Demo protocol ana- 
lyzer to examine Internet data traffic entering and exiting a campus LAN. 


8-2 THE LINE CONNECTION 


HSSI This section introduces the basic knowledge needed for configuring the high-speed 
High-speed serial interface serial data transmission interfaces used to connect LANs together and to connect the 

campus network to the outside world. The term “high speed” is relative. For large net- 
oc works, a high-speed connection could be a DS-3 (44.7+ Mbps) or a connection to an 
pcan HSSI (high-speed serial interface) that supports data rates from 300 kbps to 52 Mbps. 
For small networks, the high-speed serial connection out of the network could be a 
T1 (1.544 Mbps). The T1 data rate is fast relative to the connection speed provided 
by a dial-up phone modem, so some users would call this a “high-speed” connection. 
Topics in this section include an introduction to the data standards currently being 
used in data communications and the data formats being used. These data standards 
include T1 to T3, DS-1 to DS-3, E1, E3, and the OC (optical carrier) data rates of 
OC-1 to OC-192. 


Data Channels 


DS-0 to DS-3; T1 to T3 The most common communications data rates for end users are DS-0 to DS-3 and T1 
Common telecommunication to T3. The T1/DS-1 and T3/DS-3 designations are actually the same data rates and 
data rates the terms are used interchangeably. The Bell system “T” carriers were established in 
DS the 1960s primarily for transporting digitized telephone conversations. In the early 


1980s, the digital signal (DS) subscriber lines became available. The data rates for the 
T/DS carriers are listed in Table 8-1. The DSO designation is for the base rate of the 
Telco digital signal lines, basically the data rate of a digitized telephone call. 

The local telephone company The T1 line is capable of carrying 24 DS-O transmissions or 24 voice channels. 
Each DS-O line uses 64 kbps (56 kbps) of data, but the data rate of 56 kbps in paren- 
theses after 64 kbps indicates the rate actually available to the user in some cases. In 
other words, the DS-O line does not guarantee that the full 64 kbps line is available. 
This depends on the connection provided by the communications carrier (teleo—the 
local telephone company) and the equipment used to make the connection. When a 
56-kbps connection is used, the other part of the data is for the overhead (synchro- 
nization and framing) required for the digital transmission. 


Digital signal 


TABLE 8-1 Data Rates for the T and DS Carriers 


Designation Data Rate 

DS-0 64 kbps (56 kbps) 
T1 (DS-1) 1.544 Mbps 

T2 (DS-2) 6.312 Mbps 

T3 (DS-3) 44.736 Mbps 

T4 (DS-4) 274.176 Mbps 
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The data lines are leased from a communications carrier for carrying any type 
of data, including voice, data, and video. It is important to note that when you lease 
a T1 (DS-1) line from the communications carrier to provide a data connection from 
point A to point B, the communications carrier does not provide you with your own 
point-to-point private physical connection. The communications carrier provides you 
with sufficient data bandwidth and a switched connection in its system to carry your 
data traffic to the destination. Most likely, your data will be multiplexed with hun- 
dreds of other T1/DS-1 data channels. An example of this is shown in Figure 8-2. Net- 
works A and B each have established and configured a T1 data connection to the telco 
cloud. The Telco cloud is the switched network the telecommunications carrier uses 
to get the data to its destination. The data from network A enters the telco cloud and 
is routed to the destination, network B. The term cloud is often used to describe the 


interconnection of networks via the Internet. 
NET X NET Y 


Network Telco Network 
A a Cloud o B 
Serial T1 Serial T1 
Connection Connection 


FIGURE 8-2 Transporting data over a T1/DS-1 line to the destination. 


Note that networks W, X, Y, and Z also interconnect to the telco cloud. These 
networks can also be exchanging data packets, possibly over the same lines carrying 
data to and from networks A and B. In other words, the data from each network is be- 
ing multiplexed together to reach the destination. 

Sometimes, a wide area network connection might only require that a portion 
of the data capacity of the T1 bandwidth be leased or used. This is called fractional 
T1. Fractional T1 data rates up to 772 kbps are available. The most common frac- 
tional T1 data rate is 56 kbps. This is called a DS-O line. The 56 kbps lines are pro- 
vided either as dedicated 24-hour leased lines or through a dial-up connection called 
switch-56. In the case of a dial-up connection, the user only pays for the data band- 
width when the service is needed. 

Two other designations for data rates are E1 and E3. These designations are 
used throughout the world where the T-carrier designation is not used. For example, 
these designations are primarily used in Europe. The data rates for E1 and E3 are 
listed in Table 8-2. 
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S al 


Telco Cloud 

The telecommunications 
carrier's switched network 
used to transport data to its 
destination; also used to 
describe the interconnected 
networks on the Internet 


Multiplexed 
Combining data packets for 
transport 


Fractional T1 

Indicates that only a portion 
of the T1 bandwidth is being 
used 


Switch-56 
A 56 kbps dial-up data 
connection 
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Point of Presence (POP) 
The point where the 
customer connects the 
network data traffic to the 
communications carrier 


Line of Demarcation 

The point where ownership 
of the communications 
equipment changes from the 
communications carrier to 
the user 


CSU/DSU 
The channel service 
unit/data service unit 


D4 Framing 
The original data framing 
used in T1 circuits 
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TABLE 8-2 €1and £3 Data Transmission Rates 


Designation Data Rate 
El 2.048 Mbps 
E3 34.368 Mbps 


Point of Presence 


The place where the communications carrier brings in service to a facility is called 
the point of presence (POP). This is where users connect their network to the com- 
munications carrier. The link to the communications carrier can be copper, fiber, dig- 
ital microwave, or digital satellite. Another term related to this is the line of 
demarcation, which is the point where ownership of the communications equipment 
changes from the communications carrier to the customer. 

The communications carrier will require the data connection be made through 
a CSU/DSU (channel service unit/data service unit). The CSU/DSU provides the 
hardware data interface to the carrier. This includes adding the framing information 
for maintaining the data flow, storing performance data, and providing line manage- 
ment. Figure 8-3 illustrates an example of inserting the CSU/DSU in the connection 
to the Telco cloud. 


Telco 
Cloud 


FIGURE 8-3 The placement of the CSU/DSU in the connection to the Telco cloud. 


The CSU/DSU also has three alarm modes for advising the user of problems on 
the link: red, yellow, and blue. The conditions for each alarm are defined in 
Table 8-3. 


TABLE 8-3 CSU/DSU Alarms 


Red Alarm A local equipment alarm that indicates that the incoming signal 
has been corrupted. 
Indicates that a failure in the link has been detected. 


Indicates a total loss of incoming signal. 


Yellow Alarm 
Blue Alarm 


T1 Framing 


The original framing for the data in T1 circuits is based on D4 framing. The D4 frame 
consists of 24 voice channels (8 kbps)—8 bits per channel plus one framing bit, 
for a total of 193 bits. The D4 system uses a 12-bit framing sequence to maintain 


synchronization of the receiving equipment. The D4 12-bit framing sequence is gen- 
erated from 12 D4 frames. 


100011011100 


ESF (extended superframe framing) is an improvement in data performance 
over D4 framing. ESF extends the frame length to 24 frames, compared to D4’s 12. 
The extended frame length creates 24 ESF framing bits. Table 8-4 shows how the 24 
bits are used. ESF uses only 6 bits for frame synchronization, compared to the 12 syn- 
chronizing bits used in D4 framing. ESF uses 6 bits for computing an error check ESF 
code. The code is used to verify that data transmission was received without errors. Extended superframe framing 
Twelve bits of the ESF frame are used for maintenance and control of the communi- 
cations link. Examples of the use of the maintenance and control bits include obtain- 
ing performance data from the link and configuring loopbacks for testing the link. As 
you will recall, a loopback is when the data is routed back to the sender. Three loop- 
back tests are graphically shown in Figure 8-4. Loopback test A is used to test the ca- 
ble connecting the router to the CSU/DSU. Test B is used to test the link through the 
CSU/DSU. Loopback test C tests the CSU and the link to Telco. 


TABLE 8-4 Function of the 24 ESF Framing Bits 


6 bits Frame synchronization 
6 bits Error detection 
12 bits Communications link control and maintenance 


PC ictus Cable CSU/ CSU/ 
DSU DSU 


@ 








© 





(A) Tests the cable connecting the router to the CSU/DSU 
Tests the link through the CSU/DSU 
(C) Tests the CSU/DSU and the link to Telco 


FIGURE 8-4 Three loopback configurations used to test a communications link. 


Line Coding Formats 


The data connection to the communications carrier requires that the proper data en- 
coding format be selected for the CSU/DSU. Data are encoded in such a way that tim- 
ing information of the binary stream is maintained and the logical 1s and Os can still 
be detected. 
A fundamental coding scheme that was developed for transmission over T1 cir- AMI 
cuits is AMI (alternate mark inversion). The AMI code provides for alternating volt- Alternate mark inversion 
age level pulses V(+) and V(-) to represent the 1s. This technique virtually removes 
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Bipolar Coding 
Successive 1s are 
represented by pulses in the 
opposite voltage direction 


B8ZS 
Bipolar 8 zero substitution 


Minimum Ones Density 
A pulse is intentionally sent 
in the data stream even if 
the data being transmitted is 
a series of all Os 


Bipolar Violation 

The pulse is in the same 
voltage direction as the 
previous pulse 


HDLC 

High-level data link control, 
a synchronous proprietary 
protocol 


PPP 
Point-to-Point Protocol 
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the DC component of the data stream. Figure 8-5 shows an example of the AMI coded 
wave form. Notice that successive 1s are represented by pulses in the opposite direc- 
tion ( V+ and V-). This is called bipolar coding. 





FIGURE 8-5 An example of the AMI data encoding format. 


The Os have a voltage level of zero volts; notice that when there are successive 
Os a straight line at zero volts is generated. A flat line generated by a long string of Os 
can produce a loss of timing and synchronization. This deficiency can be overcome 
by the transmission of the appropriate start, stop, and synchronizing bits, but this 
comes at the price of adding overhead bits to the data transmission and consuming a 
portion of the data communication channel’s bandwidth. 

The B8ZS (bipolar 8 zero substitution) data encoding format was developed to 
improve data transmission over T1 circuits. T1 circuits require that a minimum ones 
density level be met so that the timing and synchronization of the data link is main- 
tained. Maintaining a minimum ones density means that a pulse is intentionally sent 
in the data stream even if the data being transmitted is a series of all Os. Intentionally 
inserting the pulses in the data stream helps maintain the timing and synchronization 
of the data stream. The inserted data pulses include two bipolar violations, which 
means the pulse is in the same voltage direction as the previous pulse in the data 
stream. 

In B8ZS encoding, eight consecutive Os are replaced with an eight-bit sequence 
that contains two intentional bipolar violations. Figure 8-6 shows an example of 
B8ZS encoding. The receiver detects the bipolar violations in the data stream and re- 
places the inserted byte (8 bits) with all Os to recover the original data stream. Thus 
the timing is maintained without corrupting the data. The advantage of using the 
B8ZS encoded format is that the bipolar violations enable the timing of the data trans- 
mission to remain synchronized without the need for overhead bits. This allows the 
use of the full data capacity of the channel. 

Two other serial line protocols commonly used in wide area networking are 
HDLC (high-level data link control) and PPP (Point-to-Point Protocol). Both of 
these protocols are used by routers to carry data over a serial line connection, typi- 
cally over direct connections such as with T1. PPP is used for serial interface con- 
nections such as that provided by modems. PPP is a full duplex protocol and is a 
subset of the HDLC data encapsulation. Examples of direct connections using HDLC 
and PPP are shown in Figure 8-7. 
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FIGURE 8-6 Intentional bipolar violations in B8ZS Encoding. 


HDLC 
Å EE 
RouterA RouterB 
PPP 
Å a 
FIGURE 8-7 An example of a direct connection. 


The routers at each end must be configured with the proper data encapsulation. 
Data encapsulation means the data is properly packaged for transport over a serial 
communications line. The type of encapsulation depends on the hardware being used 
to make the connection. The command for setting the data encapsulation is encapsu- 
lation (encap). The options for the data encapsulation on the router can be viewed by 
entering encap ? at the router’s (config-if)# prompt. The following shows an exam- 
ple of using the encap ? command: 

Router (config-if)#encap ? 


atm-dxi ATM-DXI encapsulation frame-relay Frame Relay networks hdlc Ser- 
ial HDLC synchronous lapb LAPB (X.25 Level 2) 
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Frame Relay Network 

A packet switching network 
designed to carry data traffic 
over a public data network 


Public Data Network 
A local telephone company 
or a communications carrier 


X.25 

A packet-switched protocol 
designed for data 
transmission over analog 
lines 


Committed Information 
Rate (CIR) 

Guaranteed data rate or 
bandwidth to be used in the 
Frame Relay connection 


ppp Point-to-Point protocol 
smds Switched Megabit Data Service (SMDS) 
x2 X.25 


The serial interface can be configured to run HDLC from the (config-if)# 
prompt. 

(Note: The (config-if)# prompt is the prompt for the interface currently being 
configured and is the same for all interfaces. Examples for setting the data encapsu- 
lation to HDLC and PPP on the SerialO interface are shown.) 

Router# conf t 

Router(config)# int s@ 

Router (config-if)#encap hdlc 

Router# conf t 


Router(config)# int s@ 
Router (config-if)#encap ppp 


The data encapsulation can be verified by using the sh int s0 command. The 
seventh line in this example shows that the encapsulation is HDLC: 

RouterB#sh int s@ 

Serial®@ is up, line protocol is up 

Hardware is HD64570 

Description: ISP Connection 

Internet address is 192.168.1.2/24 

MTU 1500 bytes, BW 1544 Kbit, DLY 20000 usec, rely 255/255, load 1/255 

Encapsulation HDLC, loopback not set, keepalive set (10 sec) 


The type of network being configured and the equipment being used to make 
the direct connection determines the selection of the format for data encapsulation. 
For example, Cisco routers automatically configure the serial interfaces to run HDLC 
but the Cisco routers support many data encapsulation formats. The HDLC data en- 
capsulation formats are implemented differently by some vendors, and there are times 
when some equipment is not interoperable with other equipment even though they 
both have specified the HDLC encapsulation. In that case, another encapsulation for- 
mat such as PPP can be used to make the direct connection. 


8-3 FRAME RELAY 


A Frame Relay network is designed to carry data traffic over a public data network 
(PDN) (for example, telco). Frame Relay evolved from the X.25 packet switching 
systems. The X.25 protocol was designed for data transmission over analog lines and 
incorporated the error checking and flow control required to maintain a reliable data 
link over these lines. Frame Relay is designed to operate over higher-quality, more 
reliable digital data lines and therefore does not require the error checking and data 
flow control of X.25. Frame Relay operates on the premise that the data channels will 
introduce no bit errors or, in the worst case, minimal bit errors. Without the overhead 
bits for error checking and data-flow control, the data capacity of a Frame Relay sys- 
tem is greatly improved. Frame Relay does provide error detection at the receivers. If 
an error 1s detected, the receiver system corrects the error. 

The commercial carrier (telco) provides the switch for the Frame Relay net- 
work. The telco provides a guaranteed data rate, or committed information rate 
(CIR), based on the service and bandwidth requested by the user. For example, the 
user may request a T1 data service with a CIR of 768 kbps. A T1 connection allows 
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a maximum data rate of 1.544 Mbps. The network (telco) allows for bursty data 
transmissions and will allow the data transfer to go up to the T1 connection carrier 
bandwidth even though the CIR is 768 kbps. Bursty means the data rates can mo- 
mentarily exceed the leased CIR data rate of the service. Communication carriers use 
what is called a committed burst information rate (CBIR) that enables subscribers 
to exceed the committed information rate (CIR) during times of heavy traffic. (Note: 
The bursty data transmission rate can never exceed the data rate of the physical con- 
nection. For example, because the maximum data rate for a T1 data service is 1.544 
Mbps, the bursty data rate can never exceed this rate.) 

The focus of this section is on establishing point-to-point Frame Relay con- 
nections. Topics covered include establishing Frame Relay PVCs (permanent virtual 
connections) inside the Frame Relay cloud. Your telco has a Frame Relay cloud that 
provides all the required data switches for routing the data to the destination network 
and establishing the PVC or a virtual direct connection. The permanent virtual con- 
nections are made through the Frame Relay cloud to the other end. There can be mul- 
tiple virtual circuits within the cloud. 

There are two basic setups for Frame Relay. The hub and spoke shown in Fig- 
ure 8-8 is one, where all the end nodes connect to one main hub. The hub serves as a 
central station for the end nodes or spokes. The downside of the hub and spoke is that 
two sites, such as B and C shown in Figure 8-8, must send their data traffic through 
the hub (A) to get to the other spoke. The other setup for Frame Relay is full mesh, 
which is a network with all sites connected via a PVC as illustrated in Figure 8-9. 
Adding another connection to make a full mesh requires only a software change 
within the Frame Relay cloud. Nodes B and C can communicate directly in a full 
mesh Frame Relay network using a PVC. 


B 


spoke 
(end node) 
CSU/DSU 


dlci 17 
dlci 16 
A 
dlci 
17 frame 
CSU/DSU —ypr g rel ay 
dlci cloud 
16 
Hub 





spoke 
(end node) 


FIGURE 8-8 The hub and spoke Frame Relay connection. 
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FIGURE 8-9 The full mesh Frame Relay connection. 


dlci Tag Each PVC is identified by a dlci tag. (Note: The acronym dilci is pronounced 
The data link connection “del-see.”) The dici tag is the data link connection identifier assigned by telco for use 
identifier assigned by a telco within the telco cloud. The tag associates which PVC is coming through and where 
for use within the telco it is coming from. Dlcis have only local relevance to the connection to telco and the 


cloud; the tag associates 
which PVC is coming through 
and where it is coming from 


router. The telco maps the dlcis from one interface to a dlci on another interface. 

Sometimes a subinterface is used to configure Frame Relay networks on a 
Cisco router. The subinterfaces used to make the Frame Relay connection act and be- 
have like physical interfaces but are actually software connections. The subinterface 
is part of one of the router’s serial interfaces. For example, s0./ indicates that this is 
a subinterface on the router’s SerialO interface. The subinterfaces on the router are 
configured using the router command int ser 0.1. This example indicates this is the 
subinterface for the 0.1 virtual serial interface. Note that subinterfaces can be config- 
ured on most router physical interfaces and are not limited to the serial interfaces. 

In Frame Relay, subinterfaces are how the router handles the PVC connection. 
Point-to-point means you have only one PVC or dlci on one subinterface. This also 
means each subinterface will have different IP subnets. The previous way to set up a 
Frame Relay connection was point-to-multipoint. All PVCs or dlcis were assigned to 
one interface. 

The term point-to-point describes the connection of the user to the Frame Re- 
lay cloud provided by telco. The user is connected to only one end of the virtual in- 
terface, as shown in Figure 8-10. The user’s router connects through a CSU/DSU to 
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the telco Frame Relay cloud. Point-to-point is the preferred way to handle Frame Re- 
lay: The setup is simple to follow and the connection acts like a regular physical se- 
rial interface. A point-to-point physical interface is a serial T1 interface that connects 
directly from one end user to the other through telco, not through a Frame Relay 
cloud. 


CSU/ Telco CSU/ 
cy DSU ae a Cloud E DSU ny 


FIGURE 8-10 The point-to-point connection to the Frame Relay cloud. 


Frame Relay can be run on any serial interface of a Cisco router. An IP address 
is not assigned to a physical interface in Frame Relay because the physical interface 
is always a point-to-multipoint interface. In contrast, subinterfaces can be made 
point-to-point or point-to-multipoint. 

The physical setup for Frame Relay will be similar to the setup for a point-to- 
point T1 setup. You must have a CSU/DSU, and the framing, line coding, and clock- 
ing must be set up for it. 


Establishing a Frame Relay Connection 
The following steps describe how to establish a Frame Relay connection: 


1. Identify the location of the end sites that are to be interconnected with the 
Frame Relay cloud. Determine whether the remote sites are within or external 
to your telco service area. If the Frame Relay connection involves more than 
one telco—for example, site A is in New Mexico (telco is Qwest) and site B is 
in Texas (telco is Southwestern Bell)—the connection would have to be pro- 
vided by a national telco such as AT&T, MCI, or Sprint, except for the last mile, 
which must be provided by the local telco. If both sites are in the same telco 
service area, that telco can provide the full Frame Relay network connection. 

2. Determine the data bandwidth needed for the Frame Relay network. The typi- 
cal connection for Frame Relay is T1. 

3. Order your data lines for the Frame Relay connection from the telco. 

4. The telco makes the connection for the Frame Relay network within the telco 
Frame Relay cloud. This includes the PVCs between the ends requested. The 
PVCs are programmed within the telco’s Frame Relay network. 

5. The telco then provides deliverables for establishing the Frame Relay connec- 
tions. This includes the physical connection to telco. Typically this is an RJ-45 
connection that connects to the CSU/DSU. 

6. Next, make a serial connection from your router to the CSU/DSU. 

7. The telco will provide you with a dlci number. You will program the dlci into 
the router to match the subnets with the hubs when configuring the subinter- 
faces. 
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8. For management purposes, obtain the circuit number from the telco. This num- 
ber is used when calling telco to obtain help when reporting Frame Relay net- 
work problems. 


Configuring Frame Relay Point-to-Point on the Router 


The following is an example of configuring a Frame Relay network using two routers, 
as shown in Figure 8-11. Routers B and C are the end nodes of the network. At the 
center is the telco Frame Relay cloud. This example demonstrates the commands 
used for configuring a point-to-point virtual connection on a router. In this example, 
the connection is established on the router’s subinterfaces or virtual serial interfaces. 

The first step is to configure one of the end nodes. The interface that connects 
to the telco should already be connected through a CSU/DSU and configured ac- 
cording to the guidelines provided by the telco. The telco will also have provided dlci 
numbers for the Frame Relay links; in this example they are 200 and 100, as shown in 






Figure 8-11. 
B dici A dici C 
200 100 
Router B Router A Router C 













10.10.200.12 





10.10.200.11 


Telco cloud 


FIGURE 8-11 The Frame Relay network. 


RouterB will be configured first. Enter the router’s configuration mode using 
the conf t command. Next, select the Serial0/O interface using the int s0/ 0 command. 
Enter the command encapsulation frame-relay to instruct the interface to encapsu- 
late the data for Frame Relay. Next, configure the Frame Relay subinterface using the 
command int s0/0.1 point-to-point. This instructs the router to configure a subinter- 
face and configure the interface for point to point. Notice that the prompt has changed 
to RouterB(config-subif)#, indicating to the user that the subinterface configuration 
mode has been entered. 

RouterB#conf t 

Enter configuration commands, one per line. End with CNTL/Z. 

RouterB(config)#int s0/0 

RouterB(config-if)#encapsulation frame-relay 

RouterB(config-if)#no shut 


RouterB(config)#int s@/@.1 point-to-point 
RouterB(config-subif )# 


The next step is to configure the IP address for the subinterface. In this case, 
the IP address of 10.10.200.11 has been assigned to RouterB’s subinterface. The last 
step on RouterB is to configure the assigned dlci number (200) to the subinterface us- 


ing the command frame-relay interface-dlci 200. This is the number assigned to the 
connection by telco. Notice that the prompt changes to RouterB(config-fr-dlci)#. 
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RouterB(config-subif)#ip address 16.10.206.11 255.255.255.0 
RouterB(config-subif)#frame-relay interface-dlci 200 
RouterB(config-fr-dlci)# 


Use the sh run command to view the running configuration. Save the updated 
router configuration using the copy run start command. The portion of the running 
configuration that shows the changes to the SerialO interface is provided. 


interface Serial@.0 

no ip address 

no ip directed-broadcast encapsulation frame-relay 
| 

interface Serial0/0.1 point-to-point 

ip address 10.10.200.11 255.255.255.0 

no ip directed-broadcast 

frame-relay interface-dlci 200 


! 

The command sh ip int brief is used to view the status of the interfaces as 
shown. Notice that the Serial0/O and SerialO/1 interfaces are both administratively 
down. This means the interfaces have not been enabled using the no shut command. 

RouterB#sh ip int br 

Interface IP-Address OK? Method Status Protocol 


FastEthernet®/0 unassigned YES unset administratively down down 
FastEthernet®/1 unassigned YES unset administratively down down 


Seriald/Q unassigned YES unset administratively down down 
Serial0/Q.1 10.10.200.11 YES manual administratively down down 
Seriald/1 unassigned YES unset administratively down down 


The steps for enabling the Serial0/O interface are shown in the following: 


RouterB#fconf t 

Enter configuration commands, one per line. End with CNTL/Z. 

RouterB(config)#int s0/6 

RouterB(config-if)#no shut 

RouterB# 

5d13h: %SYS-5-CONFIG_ I: Configured from console by console 

5d13h: %LINK-3-UPDOWN: Interface Serial@/®@, changed state to up 

5d13h: %FR-5-DLCICHANGE: Interface Serial@/@® DLCI 200 state changed to 
INACTIVE 

5d13h: %LINEPROTO-5-UPDOWN: Line protocol on Interface Seriald/Q, 
changed state to up 


The sh ip int brief command for RouterB now shows that the Serial0/O inter- 
face is up but the subinterface 0/0.1 is still administratively down. The command no 
shut must be issued on the subinterface to turn it on, as shown: 

RouterB#sh ip int br 

Interface IP-Address OK? Method Status Protocol 


FastEthernet®/0 unassigned YES unset administratively down down 
FastEthernet®/1 unassigned YES unset administratively down down 


Seriald/Q unassigned YES unset up up 
Serial0/Q.1 10.10.200.11 YES manual administratively down down 
Seriald/1 unassigned YES unset administratively down down 


RouterBéfconf t 

Enter configuration commands, one per line. End with CNTL/Z. 

RouterB(config)#int sQ/0.1 

RouterB(config-subif)#no shut 

RouterB(config-subif )# 

5d13h: %FR-5-DLCICHANGE: Interface Serial@/@ DLCI 200 state changed to 
ACTIVE 

5d13h: %FR-5-DLCICHANGE: Interface Serial@/@ DLCI 200 state changed to 
INACTIVE 

5d13h: %SLINEPROTO-5-UPDOWN: Line protocol on Interface Serial@/0.1, 
changed state to down 
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Notice that when the subinterface is enabled using the no shut command, the 
subinterface attempts to become ACTIVE but changes state back to INACTIVE be- 
cause the other end of the Frame Relay point-to-point connection has not been con- 
figured. The next step is to configure the other end on RouterC. 

RouterC’s Serial0/1 interface connects to the telco Frame Relay cloud as shown 
in Figure 8-11. The dlci assigned by the telco to this connection is 100. The com- 
mands for configuring RouterC are the same as for RouterB. The steps for configur- 
ing the serial interface and subinterface are shown next: 


RouterC#conf t 

Enter configuration commands, one per line. End with CNTL/Z. 
RouterC(config)#int s@/1 

RouterC(config-if)#encap frame-relay 

RouterC(config-if)#no shut 

RouterC(config-if)#int s@/1.1 point-to-point 
RouterC(config-subif)#ip address 16.16.206.12 255.255.255.0 
RouterC(config-subif)#no shut 
RouterC(config-subif)#frame-relay interface-dlci 100 
RouterC(config-fr-dlci)# 


The running-configuration for the Seriall interface on RouterC now shows the 
following. Don’t forget to save the updates to NVRAM using the copy run start 
command. 


interface SerialQ/1 

no ip address 

! 

interface Serial0/1.1 point-to-point 
ip address 10.10.200.12 255.255.255.0 
no arp frame-relay 


frame-relay interface-dlci 100 
! 


Use the sh ip int br command to view the status of the interfaces as shown. The 
Serial0/1 interface is up, indicating there is a connection to the interface and the 
subinterface (serial 0/1.1) is also up, indicating the Frame Relay connection is up. 


RouterC#sh ip int br 


Interface IP-Address OK? Method Status Protocol 
FastEthernet®/® unassigned YES unset administratively down down 
Seriald/Q unassigned YES unset administratively down down 
Serial@/1 unassigned YES unset up up 
Serial@/1.1 10.10.200.12 YES manual up up 


The Frame Relay connection can be checked by pinging the IP address of the 
other subinterface (10.10.200.11) as shown here: 


RouterC#ping 16.10.2006. 11 
Type escape sequence to abort. 
Sending 5, 1@@-byte ICMP Echos to 10.10.200.11, timeout is 2 seconds: 


Success rate is 100 percent (5/5), round-trip min/avg/max 68/68/68 ms 


The ping is successful, indicating that the Frame Relay connection has been 
properly configured. The command show frame-relay PVC is used to check packet 
delivery over the Frame Relay network. 

RouterC#sh frame-relay pvc 

PVC Statistics for interface Serial®/® (Frame Relay DTE) 

PVC Statistics for interface SerialO@/1 (Frame Relay DTE) 


DLCI = 100, DLCI USAGE = LOCAL, PVC STATUS = ACTIVE, INTERFACE = Ser- 
ial0/1.1 
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input pkts 206 output pkts 207 in bytes 16768 


out bytes 16642 dropped pkts 0 in FECN pkts 0 
in BECN pkts 0 out FECN pkts @Q out BECN pkts 0 
in DE pkts 0 out DE pkts 0 


out bcast pkts 190 out bcast bytes 14994 
pvc create time 2d21h, last time pvc status changed 00:13:39 


Networking Challenge—Frame Relay 


Use the Network Challenge software to demonstrate that you can configure Frame 
Relay for RouterB and RouterC in the Frame Relay Network provided in Figure 
8-11. Place the Networking CD-ROM in your computer’s CD drive. Open the Net- 
work Challenge folder and click Net-Challenge.exe. When the software is running, 
click the Select Challenge button to open a Select Challenge drop-down menu. Se- 
lect Chapter 8—Frame Relay. This opens a checkbox that can be used to verify that 
you have completed all the tasks. 


Enter the privileged EXEC mode on RouterB. Use the password Chile. 

Enter the router configuration mode, Router(config). 

Set the hostname to RouterB. 

Enter the configuration mode for the serial 0/0 interface (Router B). 

Set the encapsulation mode for the serial 0/0 interface to frame-relay. 

Configure a point-to-point subinterface (0/0.1) on RouterB. 

Configure the IP address for the subinterface on the serial 0/0 to 10.10.200.11 

with a subnet mask of 255.255.255.0. 

8. Configure RouterB’s S0/0.1 frame-relay subinterface to use dlci 200. 
9. Use the proper command to verify that RouterB is properly configured. 

10. Enable the RouterB frame-relay subinterface. 

11. Select Router C and enter RouterC’s privileged EXEC mode. Use the password 
Chile. 

12. Enter the router configuration mode, RouterC(config). 

13. Set the hostname to RouterC. 

14. Enter the configuration mode for the serial 0/1 interface (Router C). 

15. Set the encapsulation mode for the serial 0/1 interface to frame-relay. 

16. Configure a 0/1.1 subinterface point-to-point for the serial 1 interface on 
RouterB. 

17. Configure the IP address for the RouterC subinterface on serial 0/1.1 to 
10.10.200.12 with a subnet mask of 255.255.255.0. 

18. Configure RouterC’s SO/1.1 frame-relay subinterface to use dlci 100. 

19. Use the proper command to verify that RouterC is properly configured. 

20. Enable the RouterC frame-relay subinterface. 

21. Use the ping command to verify that RouterB sees the 10.10.200.12 interface 
on RouterC. 

22. Use the proper command to verify packet delivery over the Frame Relay 

network. 


Os of ee 


ATM 
Asynchronous transfer mode 


8-4 ATM Packet Switching 


Packets are processed at 
Asynchronous Transfer Mode (ATM) is a cell relay technique designed for voice, switching centers and 


data, and video traffic. Cell relay is considered to be an evolution of packet switch- directed to the best network 
ing in that packets or cells are processed at switching centers and directed to the best for delivery 
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Payload network for delivery. The stations connected to an ATM network transmit octets (8 

Another name for the data bits of data) in a cell that is 53 octets (bytes) long. Forty-eight bytes of the cell are for 

being transported data (or payload) and five bytes are for the cell header. The ATM cell header contains 
the data bits used for error checking, virtual circuit identification, and payload type. 
All ATM stations are always transmitting cells, but the empty cells are discarded at 
the ATM switch. This provides more efficient use of the available bandwidth and al- 
lows for bursty traffic. Also, the station is guaranteed access to the network with a 
specified data frame size. This is not true for IP networks, where heavy traffic can 
bring the system to a crawl. The ATM protocol was designed for use in high-speed 
multimedia networking, including operation in high-speed data transmission from T1 
up to T3, E3, and SONET. (SONET stands for synchronous optical network and is 
covered in Chapter 12.) The standard data rate for ATM is 155 Mbps, although the 
rates are continually evolving. 


Virtual Path Connection ATM is connection oriented, using two different types of connections, a virtual 
(VPC) path connection (VPC) and a virtual channel connection (VCC). A virtual chan- 
Used to connect the end nel connection is used to carry the ATM cell data from user to user. The virtual chan- 
users nels are combined to create a virtual path connection, which is used to connect the 
Virtual Channel end users. Virtual circuits can be configured as permanent virtual connections (PVCs) 
Connection (VCC) or they can be configured as switched virtual circuits (SV Cs). 

Carries the ATM cell from user Five classes of services are available with ATM, based on the needs of the user. In 
to user some applications, users need a constant bit rate for applications such as teleconferenc- 


ing. In another application, users might need only limited periods of higher bandwidth 


SVC to handle bursty data traffic. The five ATM service classes are described in Table 8-5. 


Switched virtual circuit 


TABLE 8-5 The Five ATM Service Classes 


ATM Service Class Acronym Description Typical Use 
constant bit-rate CBR Cell rate is constant Telephone, video- 
conferencing 
television 
Variable bit-rate/ VBR-NRT Cell rate is variable Email 
non-real time 
Variable bit-rate VBR-RT Cell rate is variable but can Voice traffic 
real time be constant on demand 
Available bit-rate ABR Users are allowed to specify File transfers/ 
a minimum cell rate email 
Unspecified bit-rate UBR TCP/IP 
VPI ATM uses an 8-bit virtual path identifier (VPI) to identify the virtual circuits 
Virtual path identifier used to deliver cells in the ATM network. A 16-bit virtual circuit identifier (VCD is 


used to identify the connection between the two ATM stations. The VPI and VCI 
numbers are provided by the telco. Together the numbers are used to create an ATM 
PVC (permanent virtual circuit) through the ATM cloud as demonstrated in Figure 8-12. 

The VPI/VCI numbers (1/33) shown in Figure 8-12 are for the ATM PVC in- 
terface. RouterA connects to the ATM cloud via an ATM physical interface on the 
router. RouterB also connects to the ATM cloud via an ATM physical interface on the 
router. In this example, the name for the physical interface on RouterA is ATM 4/0. 
This is comparable to the EO name for the router’s EthernetO interface. 


VCI 


Virtual channel identifier 
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FIGURE 8-12 An example of a connection to an ATM cloud. 


The following listing is from a router configured to run ATM: 


Interface ATM 4/0 

description net atm (1 234567 89) 

no ip address 

atm scrambling cell-payload atm framing cbitplcp 
no atm ilmi-keepalive 


The first line, Interface ATM 4/0, identifies the physical interface being con- 
figured, in this case ATM interface 4. The second line, description net atm (12345 
6 7 8 9), is a description of the ATM connection. The name of the connection is net; 
it is an ATM connection and the telco circuit number is 1 2 3 4 5 6 7 8 9. The third 
line, no ip address, indicates that no IP address is specified for the ATM interface. 
The physical interface on an ATM connection is not assigned an IP address. The two 
commands atm scrambling cell-payload and atm framing cbitplcp are entries re- 
quired to make the connection to the telco interface. Telco specifies the format for 
these commands. The entry no atm ilmi-keepalive is used to disable the generation of 
keepalive messages. 

The next group of commands are used to configure the router’s subinterface: 

interface ATM4/0.33 point-to-point 

description PVC to CityB (12345432 1) 

ip address 192.168.23.1 255.255.255.0 


pvc netB 1/33 
vbr-nrt 3000 3000 1 broadcast encapsulation aal5snap 


The entry interface ATM 4/0.33 point-to-point indicates that the VCI number 
for the subinterface is 33 and it is on the ATM 4 physical interface. It also indicates 
that this is a point-to-point connection. The second line is for the description of the 
subinterface. It indicates that this is a PVC for connecting to CityB’s network, and the 
telco circuit number is 1 2 3 45 43 2 1. The third line specifies the IP address for the 
subinterface. 

The entry pvc netB 1/33 creates a PVC with a VPI of 1 and a VCI of 33. 

The entry vdr-nrt 3000 3000 1 is used to configure the peak, average, and burst 
options for voice traffic over the PVC. This parameter is typically specified by telco. 
The output pcr (peak cell rate) is 3000 kbps and the output scr (sustained cell rate) is 
3000 kbps. The 1 indicates an output mbs (maximum burst size) of 1. 

The entry broadcast enables broadcasts to be forwarded across the ATM PVC. 
The entry encapsulation aal5snap indicates that the ATM adaptation layer 5 is to be 
used to prepare the data for transmission over ATM. AALS encapsulation is typically 
specified to transport TCP/IP data traffic over ATM. 
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To display the ATM interfaces, enter the show atm vc router command as 
demonstrated in the following ouput: 


router#sh atm vc 


VCD/ Peak Avg/Min Burst 

Interface Name VPI VCI Type Encaps SC Kbps Kbps Cells Sts 
1/@.32 atmnorth 1 32 PVC SNAP UBR 100000 UP 
1/0.33 2 1 33 PVC SNAP UBR 3000 UP 
1/@.34 6 1 34 PVC SNAP CBR 5000 UP 


salsa-backup# 


The 1/0.32 indicates the this is the 1/0 physical interface and the .32 is the PVC. 
The type is a PVC (permanent virtual connection), the encapsulation is SNAP (the 
Subnetwork Access Protocol), the service class is UBR, which is an unspecified bit 
rate running TCP/IP. The bit rate is 100000 kbps and the status (Sts) is up. 

The next command shows how to display only a specific atm virtual channel 
(vc); the command is show atm ve interface atm1/0.33.This command only displays 
the atm1/0.33 virtual channel. The types of atm interfaces typically listsed are DS3 
(44.736 Mbps), OC-3 (155.52 Mbps) OC-12 (622.08 Mbps), and OC-192 (9953.28 


Mbps). 
router#sh atm ve interface atm1/@0.33 
VCD/ Peak Avg/Min Burst 
Interface Name VPI VCI Type Encaps SC Kbps Kbps Cells Sts 
1/0.33 2 1 33 PVC SNAP UBR 3000 UP 
router# 


The last command examined is used to display information on the interface. 
The command used is show controller atm<slot/port>. In this case, the information 
on the atm1/0 interface is displayed. Part of the display for the atm1/0 interface is 
listed. 
router#sh controller atm1/@ 
Interface ATM1/0 is up 
Hardware is ENHANCED ATM PA Plus - OC3 (155@00Kbps) 
Framer is PMC PM5346 S/UNI-155-LITE, SAR is LSI ATMIZER II 
Firmware rev: X102, Framer rev: ©, ATMIZER II rev: 4 
idb=0x638A43E0, ds=0x638AC000, vc=0x638F76E0 
slot 1, unit 1, subunit @, fci_type @x03A9, ticks 226930 
2400 rx buffers: size=512, encap=64, trailer=28, magic=4 
Curr Stats: 
VCC count: current=6, peak=6 
AAL2 VCC count: @Q 
AAL2 TX no buffer count: @ 


Establishing the ATM Connection 


The previous discussion has defined what ATM is and how to display information 
about the interface on your router. The last discussion describes the steps required for 
establishing an ATM connection with the telco. 


1. Determine the speed required for the ATM data connection. This will be based 
on the budget available for making the connection and the data bandwidth 
needs of the network. 

2. Select the hardware to be used for making the ATM connection. This also de- 
pends on the budget available for the network connection and the data connec- 
tion speed selected. 
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Order the ATM connection from the telco. 

4. Telco will set up the ATM switch connection within the telco cloud and provide 
you with the circuit number. This includes the VPI# and the VCI#. 

5. The next step is to configure the local hardware with the information provided 
by telco. 

6. After completing the local ATM configuration, contact the telco and they will 

verify your settings and test the connection. After the telco completes their test- 

ing, the ATM connection is ready to use. 


8-5 DIAL-IN ACCESS 


This section addresses the technologies used to facilitate dial-in access to a network. 
This includes an overview of analog, digital, and hybrid techniques used for estab- 
lishing a remote network connection via the telephone connection. 

The limitations of a modem connection are first examined, followed by an 
overview of the V.92/V.90 standard (hybrid connection). Next, high-speed access is 
examined using cable modems, ISDN, and the latest in high-speed remote digital ac- 
cess, XDSL. This section concludes with the last piece needed for remote access, the 
remote access server. This includes the steps for setting up a Windows 2003 remote 
access server to accept dial-in access via a modem connection. 


Analog Modem Technologies 


The voice frequency (analog) channels of the public switched telephone network are 
used extensively for the transmission of digital data. Transporting data over analog 
channels requires that the data be converted to an analog form that can be sent over 
the bandwidth-limited line voice-grade channels. In voice-grade telephone lines, the Th 

rae e standard for all analog 
bandwidth is limited by transformers, carrier systems, and line loading. Each of these nodem connections with a 
factors contributes to attenuation of all signals below 300 Hz and above 3400 Hz. maximum data rate of up to 
While the bandwidth from 300 to 3400 Hz is suitable for voice transmission, itis not 34 kbps; V.44 provides 
appropriate for digital data transmission because the digital pulse contains harmon- improved data compression, 
ics (higher frequencies) well outside this range. To transmit data via a phone requires smaller file sizes that provide 
the conversion of a signal to fit totally within the 300 to 3400-Hz range. This con- faster file transfers and 
version is provided by a modem. improved Web browsing 

There are currently two major modem standards for providing high-speed mo- v.92 
. . i .92/V.90 
dem connections to an analog telephone line. These standards are V.44/V.34, which Tiecrandaed tara 
is totally analog and supports data rates up to 33.6 kbps, and V.92/V.90, which is a combination analog and 
combination of digital and analog and supports data rates up to 56 kbps. The digital modem connection 
V.92/V.90 modem connection requires a V.92 or V.90-compatible modem and an In- with a maximum data rate of 
ternet service provider (ISP) that has a digital line service back to the phone company. 56 kbps; V.92 provides a 
The data transfer with V.92/V.90 is called asymmetric operation because the data quick connect feature that 
rate connection to the service provider is typically at V.34 speeds, whereas the data cuts down on negotiation 
rate connection from the service provider is at the V.92/V.90 speed (56 kbps). The dif- and handshake time 
ference in the data rates in asymmetric operation is due to the noise introduced by the COmpared to V.90 
analog-to-digital conversion. Asymmetric Operation 
The modem link from your computer to the PSTN (your telephone connection) Describes the modem 

is typically analog. This analog signal is converted to digital at the phone company’s operation when the data 
central office. If the ISP has a digital connection to the phone company, an analog-to- transfer rates to and from 
digital conversion is not required. However, the signal from the ISP through the phone the service provider differ 


V.44/V.34 
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Cable Modem 

A modem that can use the 
high bandwidth of a cable 
television system to deliver 
high-speed data to and from 
the service provider 


Ranging 

A technique used by cable 
modems to determine the 
time it takes for data to 
travel to the cable head end 


ISDN 
Integrated services digital 
network 
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company is converted back to analog for reception by your modem. The digital-to- 
analog process does not typically introduce enough noise to affect the data rate. Fig- 
ure 8-13 shows the digital—analog path for V.92/V.90. 








Phone 
r — —— — company 
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Internet 
service 
— — = Analog provider 
Digital 





FIGURE 8-13 The digital-analog data path for V.92/V.90. 


Cable Modems 


Cable modems provide an alternative way to access a service provider. Cable 
modems capitalize on their high-bandwidth network to deliver high-speed, two-way 
data. Data rates range from 128 kbps to 10 Mbps upstream (computer to the cable 
head end) and 10 to 30 Mbps downstream (cable head end back to the computer). The 
cable modem connections can also be one-way when the television service imple- 
mented on the cable system precludes two-way communications. In this case, the 
subscriber connects to the service provider via the traditional telephone and receives 
the return data via the cable modem. The data service does not impair the delivery of 
the cable television programming. Currently cable systems are using the Ethernet 
protocol to transfer the data over the network. Many subscribers use the same up- 
stream connection. This leads to a potential collision problem, so a technique called 
ranging is used. With ranging, each cable modem determines the amount of time 
needed for its data to travel to the cable head end. This technique minimizes the col- 
lision rate, keeping it to less than 25 percent. 


ISDN 


The integrated services digital network (ISDN) is an established data communication 
link for both voice and data using a set of standardized interfaces. For businesses, the 
primary attractions are increased capability, flexibility, and decreasing cost. If one 
type of service—say, facsimile—is required in the morning and another in the after- 
noon—perhaps teleconferencing or computer links—it can easily shift back and 
forth. At present, the hookup for a given service might take a substantial time to com- 
plete. With ISDN, new capacities will be available just by asking for them through a 
terminal. 

The ISDN contains four major interface points, as shown in Figure 8-14. The 
R, S, T, and U partitions allow for a variety of equipment to be connected into the sys- 
tem. Type 1, or TE], equipment includes digital telephones and terminals that com- 
ply with ISDN recommendations. Type 2, or TE2, gear is not compatible with ISDN 


specifications. It needs a terminal adapter to change the data to channel rate. The TE2 
equipment interfaces the network via the R interface point. 


Four-wire Four- or 
transmission two-wire Two-wire 
line Network transmission line transmission line 














termination 2 





(NT2) 
are Network 
equipment — termination 1 To central 
a (NTI) U office 
Interface 
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Four-wire 
transmission line 


Terminal 
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FIGURE 8-14 ISDN setup illustration of R, S, T, and U interfaces. (Source: Modern 
Electronic Communication 9/e, by G. M. Miller & J. S. Beasley, 2008, p. 499. Copyright © 
2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper 
Saddle River, NJ.) 
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Interface 


The ISDN standards also define two network termination (NT) points. NT1 
represents the telephone company’s network termination as viewed by the customer. 
NT2 represents the termination of such things as local area networks and private 
branch exchanges. 

The customer ties in with the ISDN’s NT 1 point with the S interface. If an NT2 
termination also exists, an additional T reference point linking both NT2 and NT1 
will act as an interface; otherwise, the S and T reference points are identical. The 
CCITT recommendations call for both S and T reference points to be four-wire syn- 
chronous interfaces that operate at a basic access rate of 192 kbps. They are called the 
local loop. 

Reference point U links NT1 points on either side of a pair of users over a two- 
wire 192-kbps span. The two termination points are essentially the central office 
switches. The ISDN specifications spell out a basic system as two B channels and one 
D channel (2B + D). The two B channels operate at 64 kbps each while the D chan- 
nel is at 16 kbps, for a total of 144 kbps. The 48-kbps difference between the basic 
192 kbps access rate and the 2B + D rate of 144 kbps is mainly for protocol signal- 
ing. The 2B + D channels are what the S and T four-wire reference points see. The B 
channels carry voice and data, while the D channel handles signaling, low-rate packet 
data, and low-speed telemetry transmissions. 

The CCITT defines two types of communication channels from the ISDN cen- 
tral office to the user, the basic access and the primary access, as illustrated in Figure 
8-15. The basic access service is the 192-kbps channel already discussed and serves 
small installations. The primary access channel has a total overall data rate of 1.544 
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Mbps and will serve installations with larger data rates. The channel contains 23 64- 
kbps B channels plus a 64-kbps D channel. 


eT ee | 


BASIC ACCESS | 
I 
Standard telephone 
ISDN telephone 
ISDN terminal 
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FIGURE 8-15 A basic and primary access ISDN system. (Source: Modern Electronic 
Communication 9/e, by G. M. Miller & J. S. Beasley, 2008, p. 500. Copyright © 2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, 
NJ.) 


xDSL Modems 


xDSL The xDSL modem is considered to be the next generation of high-speed Internet ac- 
A generic representation of cess technology. DSL stands for digital subscriber line, and the “x” generically rep- 
the various DSL technologies resents the various types of DSL technologies that are currently available. The DSL 
that are available technology uses existing copper telephone lines to carry data. Copper telephone lines 
DSL can carry high-speed data over limited distances, and the DSL technologies use this 


trait to provide a high data rate connection. However, the actual data rate depends on 
the quality of the copper cable, the wire gauge, the amount of crosstalk, the presence 
of load coils, the bridge taps, and the distance of the phone service’s central office. 


Digital subscriber line 
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DSL is the base technology in xDSL services. It is somewhat related to the 
ISDN service; however, the DSL technologies provide a significant increase in band- 
width and DSL is a point-to-point technology. ISDN is a switch technology and can 
experience traffic congestion at the phone service’s central office. The available 
XDSL services and their projected data rates are provided in Table 8-6. 


TABLE 8-6 xDSL Services and Data Rates 


Technology Data Rate Distance Limitation 
ADSL 1.5-8 Mbps downstream 18,000 ft 

Up to 1.544 Mbps upstream 
IDSL Up to 144 kbps full duplex 18,000 ft 
HDSL 1.544 Mbps full duplex 12,000 to 15,000 ft 
SDSL 1.544 Mbps full duplex 10,000 ft 
VDSL 13-52 Mbps downstream 1,000 to 4,500 ft 


1.5-2.3 Mbps upstream 


DSL services use filtering techniques to enable the transport of data and voice 
traffic on the same cable. Figure 8-16 shows an example of the ADSL frequency spec- 
trum. Note that the voice channel, the upstream data connection (from the home com- 
puter), and the downstream data connection (from the service provider) each occupy 
their own portion of the frequency spectrum. ADSL (asymmetric DSL) is based on 
the assumption that the user needs more bandwidth to receive transmissions (down 
stream link) than for transmission (upstream link). ADSL can provide data rates up 
to 1.544 Mbps upstream 1.5 to 8 Mbps downstream. 


Downstream 
Upstream 





frequency f 


FIGURE 8-16 The ADSL frequency spectrum. (Source: Modern Electronic Communication 
9/e, by G. M. Miller & J. S. Beasley, 2008, p. 502. Copyright ©2008 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


The bandwidth of a copper telephone line is limited to 300 to 3400 Hz. The 
xDSL services use special signal-processing techniques for recovering received data 
and a unique modulation technique for inserting the data on the line. For ADSL, a 
multicarrier technique called discrete multitone (DMT) modulation is used to carry 
the data over the copper lines. It is well understood that the performance of copper 
lines can vary from site to site. DMT uses a technique to optimize the performance 
of each site’s copper telephone lines. The DMT modem can use up to 256 subchan- 
nel frequencies to carry the data over copper lines. A test is initiated at startup to de- 
termine which of the 256 subchannel frequencies should be used to carry the digital 


ADSL (Asymmetric DSL) 
A service providing up to 
1.544 Mbps from the user to 
the service provider and up 
to 8 Mbps back to the user 
from the service provider 


Discrete Multitone 
(DMT) 

A multicarrier technique 
used to transport digital 
data over copper telephone 
lines 
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data. The system then selects the best subchannels and splits the data over those avail- 
able for transmission. 

ADSL is receiving the most attention because its data modulation technique, 
DMT, is already an industry standard. Figure 8-17 provides an example of an xDSL 
network. The ADSL system requires an ADSL modem, which must be compatible 
with the service provider. Additionally, a POTS (Plain Old Telephone Service) split- 
ter is required to separate the voice and data connection. The filter is placed inline 
with the phone connection to remove any of the high-frequency upstream data noise 
that gets into the voice frequency spectrum (refer to Figure 8-16). A filter is required 
for all telephone connections to eliminate noise interference any time a computer is 
in use on the connection. 
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FIGURE 8-17 An xDSL connection to an ISP. (Source: Modern Electronic Communication 
9/e, by G. M. Miller & J. S. Beasley, 2008, p. 503. Copyright ©2008 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 
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The Remote Access Server 


The remote access server (RAS) is the last piece needed for completing a dial-up con- RAS 
nection to the network. The remote access server provides a way for the outside user Remote access server 
to gain access to a network. The connection to a RAS is typically provided through a 
telephone line provided by the PSTN (public switched telephone network); in other 
words, the basic telephone service. The dial-up connection could also be via cable 
modem, ISDN, or DSL technology. 

The protocol typically used for connecting to a RAS is PPP (Point-to-Point Pro- 
tocol), introduced in section 8-2. PPP helps establish the dial-up connection, manages 
data exchanges between the user and the RAS, and manages the data packets for de- 
livery over TCP/IP. 

The following steps describe how to configure RAS for a Windows 2003 server. 
The server connects to the PSTN through a modem (analog, cable, ISDN, DSL) to 
the telephone connection. The outside client also connects his or her PC to the PSTN 
through a modem. This is shown in Figure 8-18. The steps for the client-side config- 
uration of a computer running Windows Vista, XP and Mac OS X are also provided. 


PSTN OUTSIDE CLIENT 
(PSTN) 
telephone 


rr 
Remote 
Access Modem Modem Re 
Server 


D/A——_> «—D/A 
=«— A/D A/D——- 


FIGURE 8-18 A RAS connection. 


Configuring PPP Service in a Windows 2003 Server—RAS Setup First click 
Start—Programs—Control Panel—Administrative Tools—Routing and Re- 
mote Access, as shown in Figure 8-19. The Routing and Remote Access window will 
come up. This is shown in Figure 8-20. 

Note: There may be some minor differences displayed on your menu. When a 
difference occurs, follow the instructions on the menu being displayed. 

To enable RAS, click Action—Configure and Enable Routing. The Action 
tab is at the upper-left of the menu. Right-click Server Status and Add Server. The 
This Computer option is highlighted. Click OK. Your computer’s name will appear 
under Server Status. Right-click this newly created computer and select Configure 
and Enable Remote Access. This opens the Setup Wizard shown in Figure 8-21. 
Click Next. This opens the window shown in Figure 8-22. Select Remote access 
server and click Next. 
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FIGURE 8-19 Starting the Remote Access Server configuration. 
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Tree | | Routing and Remote Access 
© Welcome to Routing and Remote Access 


Routing and Remote Access provides integrated multiprotocol routing, 
remote access, and virtual private network (VPN) capabilities. 


To add a Routing and Remote Access server, on the Action menu, click 
Add Server, 


For more information about setting up a Routing and Remote Access 
server, see "Checklist: Installing and configuring the router" and 
"Checklist: Installing and configuring the remote access server" in 
online Help. 








FIGURE 8-20 The Routing and Remote Access window. 


e Wide Area Networking 


Caan 


Routing and Remote Access Server Setup Wizard 






Welcome to the Routing and Remote 
Access Server Setup Wizard 






This wizard helps you set up your server so that you can 
connect to other networks and allow connections from 
remote clients. 







To continue, click Next. 





FIGURE 8-21 The Routing and Remote Access Server Setup Wizard menu. 


Routing and Remote Access Server Setup Wizard f x| 
Common Configurations z 
You can select from several common configurations. as 


C Internet connection server 
Enable all of the computers on this network to connect to the Internet. 





(* Remote access server 
Enable remote computers to dial in to this network. 


C Virtual private network (YPN) server 
Enable remote computers to connect to this network through the Internet. 


C Network router 
Enable this network to communicate with other networks. 


C Manually configured server 
Start the server with default settings. 


< Back Cancel 





FIGURE 8-22 The window for selecting the Remote Access Server option. 


The next screen (shown in Figure 8-23) is for selecting the protocols used for DHCP 
the remote clients. Make sure TCP/IP is selected and click Next. This opens the IP Dynamic Host Control 
Address Assignment window, shown in Figure 8-24. In this example, DHCP (dy- Protocol 
namic host control protocol) will be used to assign the IP address to the machine 
when a connection is established. Select DHCP and click Next. 
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Routing and Remote Access Server Setup Wizard d x| 


Remote Client Protocols z3 
The protocols required for remote client access must be available on this server. Pm 


Verify that the protocols required on this server for remote clients are listed below. 


Protocols: 
TCP/IP 


( ‘Yes, all of the required protocols are on this list 
C No, | need to add protocols 





FIGURE 8-23 The window for selecting the remote client protocols. 


Routing and Remote Access Server Setup Wizard x| 


IP Address Assignment 
You can select the method for assigning IP addresses to remote clients. 





How do you want IP addresses to be assigned to remote clients? 


O Automatically 


If you use a DHCP server to assign addresses, confirm that it is configured properly. 
If you do not use a DHCP server, this server will generate the addresses. 


( From a specified range of addresses 


< Back Cancel | 





FIGURE 8-24 The IP Address Assignment window. 


The next window (Figure 8-25) is for selecting the management of multiple re- 
mote access servers. This option provides a way to centralize the RAS management. 
Choose the option to skip setting up a RADIUS server and click Next. 

Windows will prompt you with a message about relaying DHCP messages. 
Click OK and the RAS server is installed. 


RAS Configuration—Modem Configuration The next steps describe the setup 
for the modem connection. From the main Windows 2003 screen, click Start— 
Settings—Programs—Administrative Tools—Routing and Remote Access. If the 
Ports window is not displayed, double-click the domain and click Ports on the left. 
The screen should look similar to Figure 8-26. 
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Routing and Remote Access Server Setup Wizard l l x| 
Managing Multiple Remote Access Servers S 
You can manage all of your remote access servers centrally. a 


A Remote Authentication Dial-In User Service [RADIUS] server provides a central 
authentication database for multiple remote access servers and collects accounting 
information about remote connections. 


Do you want to set up this remote access server to use an existing RADIUS server? 


(© iNo, | don't want to set up this server to use RADIUS no 


© Yes, | want to use a RADIUS server 





© Windows provides a RADIUS solution called Internet Authentication Service (IAS) 
as an optional component that you can install through Add/Remove Programs. 





FIGURE 8-25 The Managing Multiple Remote Access Servers window. 


(01x! 
| Action view || = > |Alm E ABl e 


Tree | Ports 





Routing and Remote Access 
fa Server Status wan Miniport (PPTP) (YPN3-4) Inactive 
E 3 HACK (local) wan Miniport (PPTP) (VPN3-3) Inactive 
H Remote Access Client: [ÈP WAN Miniport (PPTP) (VPN3-2) Inactive 
BR 3 WAN Miniport (PPTP) (VPN3-1) Inactive 
E- BP Routing Sawan Miniport (PPTP) (VPN3-0) Inactive 
H-A Remote Access Policie Sawan Miniport (L2TP) (YPN2-4) Inactive 
(J Remote Access Loggir a wan Miniport (L2TP) (VPN2-3) Inactive 
Sawan Miniport (L2TP) (YPN2-2) Inactive 
Sawan Miniport (L2TP) (YPN2-1) Inactive 
wan Miniport (L2TP) (VPN2-0) Inactive 


FIGURE 8-26 The Ports window. 


Right-click Ports and click Properties. A list of devices should be displayed 
as shown in Figure 8-27. Your modem should be included in this list. Highlight the 
modem and click Configure. In this example, the Compaq Microm modem is 
selected. 
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Devices | 


Routing and Remote Access (RRAS) uses the devices listed below. 





Compaq Microcom 56K Office... None Modem 1 
WAN Miniport (PPTP) PPTP 5 
WAN Miniport (L2TP] RAS L2TP 5 
Direct Parallel None Parallel 1 


Configure... | 





FIGURE 8-27 The Port Properties—Devices window. 


Place a checkmark in the box for Remote Access Connections. Specify the 
phone number for the phone line the modem is connected to. This is shown in Figure 
8-28. Click OK on the Configuration window and again on the Ports Properties 
screen to return to the Routing and Remote Access screen. Your modem should be 
listed among the ports. This is shown in Figure 8-29. 





Configure Device - Compaq Microcom 56K OfficePorte ¥e 2\ xi 


You can use this device for remote access requests or demand-dial 
connections. 


IV ‘Remote access connections [inbound only} 


I Demand-dial routing connections (inbound and outbound) 


Phone number for this device: [555-21 21 


You can set a maximum port limit for a device that supports multiple ports. 


Maximum ports: fi a 


Coes | 





FIGURE 8-28 The window for specifying the phone number used by the modem. 
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| Action view || = » | lm A Ble 


Tree | Ports 


Name © Device | Comment | Status | 


wan Miniport (PPTP) (YPN3-4) VPN Inactive 
wan Miniport (PPTP) (¥PN3-3) VPN Inactive 
wan Miniport (PPTP) (¥PN3-2) VPN Inactive 
wan Miniport (PPTP) (VPN3-1) VPN Inactive 
wan Miniport (PPTP) (¥PN3-0) VPN Inactive 
wan Miniport (L2TP) (¥PN2-4) VPN Inactive 
wan Miniport (L2TP) (¥PN2-3) VPN Inactive 
Swan Miniport (L2TP) (VPN2-2) VPN Inactive 
wan Miniport (L2TP) (¥PN2-1) VPN Inactive 
SWAN Miniport (L2TP) (VPN2-0) VPN Inactive 
Compaq Microcom 56K OfficeP... MODEM Inactive 



















Routing and Remote Access 
we Server Status 

=)» fe) HACK (local) 

a Remote Access Clients 
By Ports 

a IP Routing 


E Remote Access Policie 
E] Remote Access Loggir 





















FIGURE 8-29 The addition of the modem to the Ports window. 


IP Configuration The next steps describe the setup for the IP address configura- 
tion. From the Routing and Remote Access window and under IP Configuration or IP 
Routing, right-click DHCP Relay Agent and go to Properties. This is shown in Fig- 
ure 8-30. Type in the IP address of the DHCP server. Click Add and enter the IP ad- 
dress for the server. This is shown in Figure 8-31. In this example, the server’s IP 
address is 10.10.20.19. Click OK. DHCP is now configured on the connection. 















Tree | | DHCP Relay Agent 
Routing and Remote Access - 
Server Status #3 Internal Enabled 6 0 0 
E 3 WEST (local) 
a Remote Access Clients (0) 
a Ports 
E a IP Routing 
TE General 





a Static Routes 





= New Interface... 


Y Remote Ac view > 
E Remote Ac —_—AAMha 






(Opens property sheet For the current selection, | | 


FIGURE 8-30 The steps for selecting the DHCP relay agent. 
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DHCP Relay Agent Properties 2|x|] 


General | 


mj m 
i Dynamic Host Configuration Protocol (DHCP) Global 


The DHCP relay agent sends messages to the server addresses listed 
W. 


Server address: 
| re g « Add 


10.10.20.19 Remove 





FIGURE 8-31 Specifying the IP address for the server. 


Account Configuration The next step is to establish a user account on the 
Windows server. (Note: Configuring users, computers, and groups for the Windows 
2008/2003 server is examined in detail in Chapter 14.) Open the Active Directory 
Users and Computers window (Start—Programs—Administrative Tools—<Active 
Directory Users and Computers). Click Users on the left of the menu. The screen 
will display a list of all the accounts on the system. An alternative method of doing 
this is to click Start—Programs—Administrative Tools—Configure Your Server. 
A configuration wizard will appear on the left side of the screen. Select Active Di- 
rectory, scroll down to the bottom of the screen and start the wizard. You can also se- 
lect Active Directory Users and Computers from Adminstrative Tools. 

The Active Directory Users and Computers window is shown in Figure 8-32. 
We want to assign remote access permission to Administrator, so right-click Admin- 
istrator and choose Properties. Click the Dial-in tab. Choose to Allow Access with 
No Callback, and click OK. The window is shown in Figure 8-33. 

The last step in this process is to set the pool of IP addresses to be used by the 
remote access server. To do this, right-click the domain name (for example salsa) and 
click Properties. Next click the IP tab—Static address pool— Add—Set range of 
IP addresses and set the range of addresses. The Windows 2003 server will issue a 
default IP address in the 169.x.x.x range if this step is not completed. 


322 Chapter 8 e Wide Area Networking 


nl 





© Administrator 
EFÈ Cert Publishers 
j- EFŽDHCP Administrators 
{Æ Domain Controllers €RDHCP Users 
~~ ForeignSecurityPrincipals |E} pnsAdmins 
H- Sales Zi onstpdateProxy 
imeem Users ffl Domain Admins 
EB domain Computers 
EB domain Controllers 
EB Domain Guests 
Domain Users 








Built-in account For admini... 
Enterprise certification an... 
Members who have admini... 
Members who have view-... 


DNS Administrators Group 


DNS clients who are permi... 
Designated administrators... 
All workstations and serve... 
All domain controllers in th... 


All domain guests 
All domain users 





Designated administrators... 
Members in this group can... 


Built-in account for quest ., 
Built-in account For anony.. 








Ej Assign a static = Aadress 


E| Apply static Hautes 





FIGURE 8-33 The Dial-in Administrator Properties window. 


Client Configuration The next step is to configuring the client-side computer for 
dial-up access. The steps for this vary for each operating system but the concepts are 
similar. The steps for client configuration in Windows Vista, Windows XP, and Mac 
OS X are presented. 
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Client Configuration in Windows Vista To establish a dial-up network 
connection in Windows Vista, follow these steps: 


1. Click the Start menu, and then select Connect To. 

2. Select Set-Up a Connection or network at the bottom of the Network Con- 
nections window. 

3. You are given a menu of choices for setting up the connection type, select Set- 
up a dial-up connection and click Next. 

4. On the next screen, input the phone number for your dial-up connection, for ex- 
ample, 555-1212. 

5. You will also need to input the username and password, and you will be asked 
to name the connection. 

6. Click Connect; if your computer is connected to a phone line you should be 
able to establish a connection. If you are not connected, you will get a “Fail”. 
If you are not ready to establish a phone connection, click Set up connection 
anyway. This will save your connection information. 


To establish a Vista phone connection after completing the setup follow these 
Steps: 


1. Click the Start menu, and then select Connect To. 
2. Select the dial-up connection from the list displayed, and then click Connect. 


Client Configuration in Windows XP This example is for setting up a new 
connection in Windows XP. 


1. The first step is to open My Computer and click My Network Places in Win- 
dows XP. On the left side of the screen, click View Network Connections. 
Click Create New Connection. The New Connection Wizard will open. Click 
Next to proceed. 

2. This opens the Network Connection Type window. Choose the option Connect 
to the network at my workplace, and click Next. This opens the network con- 
nection window. Select Dial-up connection. This enables a connection for use 
over a traditional phone line or ISDN. Click Next. 

3. This opens the Connection Name window. Enter the name for the connection. 
In this example, the connection is to the server (Salsa); therefore, that is the 
name entered. Enter a name for the connection and click Next. 

4. The next window displayed is for specifying the phone number being used to 
make the connection. Enter the phone number of the Windows 2003 RAS 
server. In this example, the phone number 555-2/2/ is entered. Click Next. 

5. The next window is for connection availability. This option is used to restrict 
access to the dial-up connection or for anyone’s use. Allow Windows to create 
the connection for Anyone’s use. Click Next. 

6. The next window is Completing the New Connection Wizard. The screen 
shows that a new connection to Salsa has been established. Click Finish. 


The Connect window will come on the screen. Enter the administrator user- 
name and password. If you wish, you can save the username and password on the sys- 
tem to prevent it from prompting you each time you use the dial-up connection. Click 
Dial and the computer should connect to the server. You can then browse the network 
through Network Neighborhood. 
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Client Configuration in Mac OS X The following are steps that can be 
used to establish a PPP modem connection using a Mac OS X computer. 


1. Click Apple—System Preferences—Network. The Network menu should 
appear. 
2. You can leave Location set to Automatic unless you plan to have more than one 
PPP connection. 
Set Show to Internal Modem. 
Click the TCP/IP tab and set configure to PPP. 
Input the appropriate Domain Name Server (DNS) IP address. 
Click PPP options and set according to your ISP’s requirements. 
Input the service provider name through which you will be connecting. 
Input the telephone number for your modem connection. This is the phone 
number for your service provider. 
9. Input the account name (username) and Password. 
10. Verify your settings 
11. Click the Apply Now button to save your changes. 


oe i 


To establish the modem connection for the Mac OS X, click Macintosh HD— 
Applications—Interconnect Connect and select Internal Modem—Connect. 
Note that the modem connection should open automatically anytime a network con- 
nection is requested. 


8-6 VPN 


This section introduces a technique for creating a virtual private network (VPN) by VPN 
creating an IP tunnel on a router. An IP tunnel is the name given to the process ofen- Virtual private network 
capsulating an IP packet within another IP packet. It is used to create a virtual link IP Tunnel 
from one IP end to the other. The physical interface to the VPN is through the router An 1P packet encapsulated in 
or through the Internet service provider. The goal of a VPN tunnel is to make the two -nother IP packet 
ends of the connection appear as if they are on the same subnet. In other words, it 
makes the two ends behave as if they are connected via a point-to-point connection. 
Tunnels are sometimes used to facilitate network access for users in remote office net- 
works or for remote users that travel a lot and need access to the network. For secu- 
rity and economic reasons, many network services, such as checking email, might not 
be accessible to clients not directly connected to the network. A tunnel makes the re- 
mote client appear as if it is directly connected to the network. In other words, the re- 
mote user becomes a virtual part of the network. 
This section demonstrates how to configure a router-to-router VPN connection. 
The second demonstration explains how to configure a VPN tunnel from a remote PC 
to a VPN server. A drawing of a VPN is provided in Figure 8-34. The home network 
is RouterA, and RouterC is the remote user at the other end of the VPN. 
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Home Network Remote User 


10.0.0.0 192.168.100.0 
S1 (192.168.210.5) = S1 (192.168.100.3) 
a Telco E o 
Cloud 
RouterA RouterC 


Tunnel IP (10.10.30.2/24) 
Tunnel IP (10.10.30.1/24) 


FIGURE 8-34 A virtual private network. 


The objective is to establish a tunnel through the IP telco cloud to connect 
RouterA with RouterC. This requires that the source and destination addresses of the 
physical network connection be defined. In this figure, RouterA connects to the telco 
cloud via the router’s Serial 0/1 interface. The IP address of 192.168.210.5 with a sub- 
net mask of 255.255.255.0 has been assigned to the RouterA Seriall interface. 
RouterC (the remote router) connects to the telco cloud via its Serial 0/1 interface. 
The IP address assigned to RouterC’s Seriall interface is 192.168.100.3 with a sub- 
net mask of 255.255.255.0. (Note: Any interface that connects to the telco cloud can 
be used to set up the VPN interface.) A tunnel is next established on each of the 
routers. The tunnel is assigned an IP address that is used in the home network. For ex- 
ample, the home network is a 10.0.0.0 network; therefore, the tunnel between 
RouterA and RouterC will have a 10.x.x.x IP address. The tunnel between RouterA 
and RouterC is called tunnel O and is assigned IP addresses of 10.10.30.1 and 
10.10.30.2. After the tunnel has been created across the IP network, the two routers 
appear to be on the same 10.10.30.x network. 

The tunnel connection makes remote users appear as if they are part of the 
home network. This is accomplished by encapsulating the IP packet. The first packet 
uses the IP address that the remote user will use after the connection has been made. 
The encapsulation is used to transport the data across the networks. 

An example of a tunnel encapsulation is provided in Figure 8-35. Figure 8-35 
(a) shows the basic IP packet. The source and destination IP address for the packet 
are listed. The source IP address for the remote tunnel is 10.10.30.2. The IP tunnel 
address for the home router interface is 10.10.30.1. This is the destination IP address. 
Figure 8-35 (b) shows the layer of encapsulation for the VPN tunnel. The source IP 
address of 192.168.100.3 is for RouterC’s Serial 0/1 interface. The destination IP ad- 
dress of 192.168.210.5 is for the home network’s RouterA Serial 0/1 interface. 

The 192.168.100.3 and 192.168.210.5 IP addresses are used to deliver the VPN 
encapsulated data packets over a TCP/IP network. When a packet is delivered to the 
destination, the encapsulation layer is removed and the data packet will appear as if 
it came from the home 10.10.30.x network. Remember, the original packet, shown in 
Figure 8-35 (a), contains the IP addresses for the VPN tunnel and the encapsulation 
layer [Figure 8-35 (b)] includes the actual physical interface IP addresses for the VPN 
tunnel. 
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10.10.30.2 10.10.30.1 


IP IP 
IP packet Source Destination 
Address Address 





192.168.100.3 192.168.210.5 


VPN VPN 
Tunnel Tunnel Tunnel IP Packet (b) 


Source Destination 





FIGURE 8-35 Data encapsulation for VPN data packets. 


Configuring a VPN Virtual Interface (Router to Router) 


In this example, a VPN virtual interface will be configured on two routers on two sep- 
arate networks. Figure 8-36 provides an illustration of the VPN. This example simu- 
lates a situation in which a VPN virtual interface is to be established between two 
networks. This requires that a virtual interface be established on the home router, 
RouterA, and the remote user on RouterC in Figure 8-36. The tunnels on each router 
will be called tunnel 0. These act like a physical interface, and each has its own IP ad- 
dress. The difference is the tunnels require a source and destination IP address for the 
tunnel. The source and destination addresses are the physical addresses (IP addresses) 
for the serial interfaces on each router that connect to the telco cloud. 


192.168.210.5 


S Telco 
S | < cloud 


RouterA 
[10.10.30.1] Tunnel 


192.168.100.3 
Home Network 
(10.0.0 .0) S1 


RouterC 
[10.10.30.2] Tunnel 


Remote Network 
(192.168.100.0) 


FIGURE 8-36 A virtual private network. 
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Make sure routing has been properly configured for each router in the network, 
the interfaces have been assigned an IP address, and the destination physical address 
from each end can be pinged prior to setting up the VPN interface and the tunnel. For 
example, RouterA can ping the remote network router (RouterC) using the command 
ping 192.168.100.3. Remember, the IP address for the serial interface is being 
pinged, and the virtual interfaces have not yet been configured. 

RouterA#ping 192.168.100.3 


Type escape sequence to abort. 
Sending 5 100-byte ICMP Echos to 192.168.100.3, timeout is 2 seconds: 


Success rate is 100 percent (5/5), round-trip min/avg/max 52/56/72 ms 


The successful ping indicates that there is a network connection between 
RouterA on the home network (192.168.210.0) and RouterC on the remote network 
(192.168.100.0). The next step is to configure the tunnel to establish a virtual private 
network between the two networks. 

A tunnel is added to the router from the configuration mode (config)#. The 
command int tunnel is entered to configure the tunnel interface. This places the 
router in the interface configuration mode—(config-if)#. The next step is to config- 
ure the virtual IP address to be used by the VPN tunnel. The IP address for the VPN 
tunnel must be on the same subnet as the home network IP address. For example, the 
home network is from the 10.0.0.0 network. In this case, the tunnel 0 interface on 
RouterA will be assigned an IP address of 10.10.30.1. The following shows the two 
steps for configuring the IP tunnel: 


RouterA(config)#int tunnel@ 
RouterA(config-if)#ip 10.10.30.1 255.255.255.0 


The next step is to define the IP destination and source address for the tunnel 
created on the home network router, RouterA. Referring to Figure 8-35, the source IP 
address for tunnel 0 from RouterA is 192.168.210.5 and the destination IP address for 
the remote interface on RouterC is 192.168.100.3. After configuring the tunnel source 
and destination IP addresses, the router prompts that the “line protocol on Interface 
Tunnel0” changed state to up: 

RouterA(config-if)#tunnel destination 192.168.100.3 

RouterA(config-if)#tunnel source 192.168.210.5 


00:31:37: %LINEPROTO-5-UPDOWN: Line protocol on Interface Tunnelð, 
changed state to up 


The command sh ip int brief can be used to check the configuration for the tun- 
nel interface as shown. A tunnel will show status up and protocol up even if it 1s not 
actually up. In this case, the other end of the tunnel connection has not yet been con- 
figured. The only way to really test the virtual link is with a ping. This will be demon- 
strated after the remote router (RouterC) is configured. 


RouterA#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/0 10.10.20.250 YES NVRAM up up 
Seriald/O 10.10.100.10 YES NVRAM up down 
Serial@/1 192.168.210.5 YES NVRAM up up 
Tunnel@ 10.10.30.1 YES manual up up 


The Seriall interface shows status up and protocol up. This is the connection to 
the communications carrier (telco), and this interface must be up for the tunnel to 
work. The command sh int tunnel 0 can be used to check to see whether tunneling 
has been con figured on the router. 
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RouterA#sh int tunnel ð 

Tunnel® is up, line protocol is up 

Hardware is Tunnel 

Internet address is 10.10.30.1/24 

MTU 1514 bytes, BW 9 Kbit, DLY 500000 usec, rely 255/255, load 1/255 

Encapsulation TUNNEL, loopback not set, keepalive set (1@ sec) Tunnel 
source 192.168.210.5, destination 192.168.100.3 

Tunnel protocol/transport GRE/IP, key disabled, sequencing disabled 

Checksumming of packets disabled, fast tunneling enabled 

Last input never, output 00:00:01, output hang never Last clearing of 
"show interface" counters never Queueing strategy: fifo 

Output queue 0/0, © drops; input queue 0/75, @ drops 

5 minute input rate @ bits/sec, @ packets/sec 

5 minute output rate @ bits/sec, @ packets/sec 

© packets input, @ bytes, @ no buffer 

Received @ broadcasts, @ runts, @ giants, @ throttles 

© input errors, © CRC, © frame, @ overrun, @ ignored, @ abort 

20 packets output, 1200 bytes, @ underruns 

© output errors, @ collisions, @ interface resets 

© output buffer failures, @ output buffers swapped out 


The following output is a portion of the configuration file displayed using the 
show run command. This output shows that the tunnel has been configured on 
RouterA. 


RouterA#sh run 


! 

! 

interface Tunneld 

ip address 10.10.30.1 255.255.255.0 

no ip directed-broadcast tunnel source 192.168.210.5 
tunnel destination 192.168.100.3 

! 

! 

RouterC#conf t 


The next step is to configure the remote user on RouterC. First, enter the 
router’s configuration mode using the conf t command. Remember, RouterC’s con- 
nection to the telco cloud has already been established and a connection verified us- 
ing the ping command. Recall that the IP address of 192.168.100.3 was pinged from 
RouterA. Next, enter the configuration for the tunnel 0 interface using the int tunnel 
0 command. At the (config-if)# prompt, enter the source and destination addresses 
for tunnel 0 as shown in the following code: 

Enter configuration commands, one per line. End with CNTL/Z. 

RouterC(config)#int tunnel ð 


RouterC(config-if)#ip address 16.16.30.2 255.255.255.0 


RouterC(config-if)#tunnel destination 192.168.210.5 
RouterC(config-if)#tunnel source 192.168.100.3 


The configuration for the interfaces can be checked using the sh ip int brief 
command as shown in the following. Note that the tunnel is listed as a separate in- 
terface on the router: 


RouterC#sh ip int brief 


Interface IP-Address OK? Method Status Protocol 
FastEthernet0/® unassigned YES not set administratively down down 
Serial@/Q 192.168.100.3 YES manual up up 
Seriald/1 unassigned YES not set administratively down down 
TunnelQ@ 10.10.30.2 YES manual up up 
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The following output is a portion of the configuration file displayed using the 
show run command. This output shows that the tunnel has been configured on 
RouterC. 


RouterC#sh run 


! 

! 

interface Tunneld 

ip address 10.10.30.2 255.255.255.0 

no ip directed-broadcast tunnel source 192.168.100.3 


tunnel destination 192.168.210.5 
! 
l 


Each end of the VPN has now been configured. The next step is to check the 
link using the ping command. The VPN tunnel virtual address of 10.10.30.2 is pinged 
from computer A as shown next: 

RouterA#ping 10.10.30.2 


Type escape sequence to abort. 
Sending 5 100-byte ICMP Echos to 10.10.30.2, timeout is 2 seconds: 


Success rate is 100 percent (5/5), round-trip min/avg/max 80/80/84 ms 


The ping shows that a virtual connection has been established between the re- 
mote user and the home network router. An interesting test of the network is to com- 
pare the results of running a traceroute from the home network to the remote user 
using the IP address for the remote user’s router interface [192.168.100.3] and then 
running a traceroute from the home network to the remote user’s VPN tunnel address 
[10.10.30.2]. The results of the test are shown here: 


Traceroute to the physical IP address 


RouterA#trace 192.168.100.3 

Type escape sequence to abort. Tracing the route to 192.168.100.3 
1 192.168.210.5 16 msec 16 msec 16 msec 

2 192.168.100.3 32 msec 32 msec * 


Traceroute to the VPN tunnel IP address 


RouterA#ftrace 10.10.30.2 

Type escape sequence to abort. 
Tracing the route to 10.10.30.2 
1 10.10.30.2 48 msec 48 msec * 


The results of the first trace show that it takes two hops to reach the destination. 
In fact, a traceroute to the physical IP address will typically show multiple router 
hops. The test on the VPN tunnel shows that the trace took only one hop because the 
remote end of the VPN tunnel is configured to be directly connected to the home “10” 
network. The trace route on a VPN tunnel from a home router to the remote user will 
show only one hop. 
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This section has described how to configure a VPN tunnel link. The commands 
for configuring and verifying the link have been discussed. The following describes 
steps for troubleshooting a VPN tunnel link if problems should occur. 


Troubleshooting the VPN Tunnel Link 
The following list are steps used to verify that the VPN tunnel is properly configured: 


1. Confirm connection to the physical interface’s IP address using a ping. 

2. Check the source and destination IP addresses of the tunnel configured on the 
router. 

. Make sure the IP addresses on the ends of the tunnel are in the same subnet. 

. ping the destination from the source. 

. Use show run to make sure the source and destinations are properly configured. 

. If the problem is not found, try rebooting the routers. 


NN HB YW 


This example has shown how a VPN tunnel can be established using two PPTP 
routers. This situation is appropriate for establishing a permanent VPN connection to Point-to-Point Tunneling 
a remote user, such as a remote office for a company. However, a remote user who Protocol 
travels will have to establish a VPN connection directly from his or her PC, through 

. , . L2TP 

an ISP and the VPN server in the home network. This requires that the remote user Layer 2 Tunneling Protocol 
use software that runs either the PPTP (Point-to-Point Tunneling Protocol) or L2TP 
(Layer 2 Tunneling Protocol). An example of the setup for a remote client’s VPN con- 
nection is graphically shown in Figure 8-37. 





Remote Client Home Network 
(10.0.0.0) (192.168.20.0) 
5.5.5.1 Teleco 5.5.5.2 VPN 
< Cloud za a | Server 
Modem 
10.10.30.2 10.10.50.10  10.10.30.1 192.168.20.1 192.168.20.2 


Remote 
User 


FIGURE 8-37 A remote client VPN connection. 


Configuring a VPN Server 


Configuring a Windows 2003 VPN server is fairly simple and only requires the rout- 
ing and remote access server configuration be started by clicking Start—Pro- 
grams—Administrative Tools—Routing and Remote Access. Right-click the 
server name and select Configure and Enable Routing and Remote Access. Fol- 
low the installation steps and choose the manually configured server option. Select 
Virtual Private Network (VPN) Server from the Common Configurations menu. 
The last step in this process is to set the pool of IP addresses to be used by the VPN 
server. To do this, right-click the server name and select Properties, click the IP tab 
and select Static Address Pool—Add—Set range of IP addresses and input the 
desired IP address range. The Windows 2003 server will issue a default IP address 
in the 169.x.x.x range if this step is not completed and your client computers will be 
assigned an IP address that is not valid for your network. 
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Configuring a Remote Client’s VPN Connection 


The following examples demonstrate how to configure a VPN remote client running 
Windows Vista, XP, or Mac OS X. These examples assume that the client has per- 
mission to connect to the VPN server on your home network. 


Windows Vista—VPN Client To start the Windows Vista VPN client configura- 
tion complete the following steps: 


1. Click Start and select Connect To, then select Set-up a connection or 
network. 

2. Select Connect to a workplace and click Next. 

3. You may get a prompt that asks, “Do you want to use a connection that you al- 
ready have?” If so, select No, create new connection, click Next, and select 
Use my Internet Connection (VPN). 

4. In the next step you will be asked to input the Internet address or the name of 
the VPN server. 

5. In the Destination Name field, enter the name for the VPN connection (for ex- 
ample, salsa-vpn). 

6. In the User Name field, enter the username for your VPN account. This is the 
account name set up on the VPN server. 

7. In the Domain field, enter the name of your domain. 

Click the Create and Close buttons to complete the setup. 

9. When the setup is complete, you can establish a VPN connection by clicking 
Start—Connect To, then right-clicking the VPN connection you just created 
and selecting Properties. 

10. Next, click the Networking tab. This gives you the option of selecting the type 

of VPN security. Select the type that matches the requirements for your VPN 
connection. 


a 


Windows XP—VPN Client 


1. Click Start—Control Panel—Network and Internet connections—Net- 
work Connections. This opens the Network Connection window. Select Vir- 
tual Private Network connection. You will be asked to input a connection 
name for the VPN connection. This example uses the name VPN-Remote. Click 
Next. This opens the Public Network Connection menu. You will be asked how 
you are to connect to the public network. Select either Do not dial or Auto- 
matically dial based on your need. Click Next. 

2. The next menu is for specifying the IP address of the VPN server on the home 
network. 

3. Click Next and you should be notified that installation is complete. Click 
Finish. 


The setup for the VPN connection is now complete for the Windows XP remote 
client. To start a VPN connection, click Start—Control Panel—Network and In- 
ternet connections—Network Connections. Select the VPN-Remote connection 
just created by double-clicking the icon. You will see a prompt that states that to con- 
nect to VPN-Remote you must first connect to your Internet or dial-in connection. 
Click Yes. You will be asked to input the username and password for the dial-in con- 
nection. Click the Dial button. After the network connection is established a new 
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window, Connect VPN-Remote, will appear. Enter the username and password for 
the VPN connection and click Connect. 


Mac OS X—VPN Client 


1. Double-click Mactintosh HD—Applications—Internet Connect. This 
opens the Internet Connect window. 

2. Click the VPN icon at the top of the Internet Connect window. 

3. Make sure the settings for the tunneling are properly set to PPTP or L2TP de- 
pending on the server configuration. 

4. Enter the VPN server address, your username, and password. Click Connect to 
test the connection. 

5. Next, quit the Internet Connect application. You will be prompted to save the 
configuration and you will be asked for a name for the VPN connection. This 
will be the name of the VPN connection you will use to establish a VPN con- 
nection. 


After completing the VPN setup, VPN connections can be established by dou- 
ble-clicking Mactintosh HD—Applications—Internet Connect. You can also es- 
tablish the VPN connection by clicking the VPN icon at the top of your Mac OS X 
main screen. You should connect to the VPN server if your network and server are 
working. 

The VPN connection to the home network VPN server should now be made. 
Remember, the remote client must have a user account and password on the Window 
2008/2003 VPN server. In this example, the user’s account name is jtest. The IP ad- 
dress of 192.168.20.31 is assigned to the VPN remote client by the VPN server when 
a connection is made. The available IP addresses were specified when the VPN server 
was configured. Running a tracert (traceroute) from the VPN server (192.168.20.2) 
to the client on the VPN network (192.168.20.31) shows a single hop. The VPN re- 
mote client appears to be on the same home network. The traceroute is shown in Fig- 
ure 8-38. 


| Select C:\WIN NTisystem32\cmd.exe 
Pinging 1972.168.20.31 wath 32 bytes of data: 


Reply from 192.168.20.31: bytes=32 time=2H3ms TTL=128 
Reply from 192.168.20.31: hbytes=32 time=263ms TIL=128 
Reply from 192.168.20.31: bytes=32 time=1688ms TTL=128 
Reply from 192.168.20.31: bytes=32 time=188ms TIL=128 


Ping statistics for 192.168 .240.31: 

Packets: Sent = 4, Received = 4, Lost = Ø (@x loss>, 
Approximate round trip times in milli-seconds: 

Minimum = i8ffims. Maximum = 2A3ma. Average = 195ms 


G:N tracert 192.168.20.31 


Tracing route to PINDLESKIN [192.168.20.31] 


over a maximum of 3H hops: 
1 i172 ms 157 ms i7i ms PINDLESKIN [192.168.260.311] 
Trace complete. 


CG: W> 





FIGURE 8-38 The traceroute from the VPN server to the VPN remote client. 
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IPsec Cisco VPN Client This section examines setting up an end-to-end encrypted VPN 

Used to encrypt data connection using the Cisco VPN Client software. These connections can be used for 

between various networking both on-site and mobile (remote) users. The Cisco VPN Client uses IPsec with the 

devices option of two encryption modes: tunnel and transport. The tunnel mode encrypts the 
header and the data (payload) for each packet. The transport mode only encrypts the 
data (payload). IPsec can be used to encrypt data between various networking devices 
such as PC to server, PC to router, and router to router. 

The first step for setting up the Cisco VPN Client is to install the software on 
the server that is to be used to establish the VPN connections. The Cisco VPN Client 
software must be licensed for each server installation. After the software is installed 
on the server, the clients connect to the server and download the Cisco VPN Client 
software. The individual requesting the software must have network access to the 
software. This usually requires that the user must have an authorized username and 
password. The next step is to install the client software. After the software is installed, 
start the Cisco VPN Client software by clicking Start—Programs—Cisco VPN 
Client. 

The first window displayed after starting the VPN client is show in Figure 
8-39. This window indicates that the current status is Disconnected. Click in the Con- 
nection Entries tab. This will list the configured connections for establishing the 
VPN connection. Note: The Cisco VPN Client software will automatically set up the 
connections available for the client. The available connections for the client are con- 
figured when the server software is installed. An example is shown in Figure 8-40. 
Select the desired link by double-clicking Connection Entry. The next window dis- 
played will be the initial handshake screen as shown in Figure 8-41. 


# status: Disconnected | VPN Client - Version 5.0.01.0600 


Connection Entries Status Certificates Log Options Help 


seag ax 


View Import Export Ervoll Verily Delete 
Connection Entries | Certificates | Log | 


Number | Certificate [Ste / | Key Size | Vat 








| Not connected. 


FIGURE 8-39 The first window, the VPN Client window, is displayed after starting the 
VPN client software. This window is showing that the current status is Disconnected. 


The next window (Figure 8-42) shows that you have connected to the Virtual 
Private Network. It says Welcome to Chile-VPN — the Chile-Virtual Private Net- 
work. 
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# status: Disconnected | VPN Client - Version 5.0.01.0600 

Connection Entries Status Certificates Log Options Help 
Beit mm 
Connect New Import Modify Delete 


(Connecion Eri | Cations | Loo | 








Off-Campus 192.65.78.142 IPSec/UDP 
On-Campus 172.16.30.2 IPSec/UDP 








FIGURE 8-40 The listing of the available connections for establishing the VPN link. 


ê VPN Client | User Authentication for “On-Campus” fx 


Enter Username and Password. 


Username: libeasley 
Password: | 





FIGURE 8-41 The initial handshake screen for the VPN client. 


# VPN Client | Banner 


Welcome to Chile-VPN - the Chile-Virtual Private Network 





FIGURE 8-42 The welcome menu for Chile-VPN — the Chile Virtual Private Network. 


After the VPN connection has been established you can click the VPN Client 
icon that should be displayed in the bottom right of your computer screen. Select the 
connection (for example, Chile- VPN). The properties for Chile-VPN will be dis- 
played as shown in Figure 8-43 (a). This window shows that Group Authentication 
has been selected. Additionally, the group name and password are entered. In this 
case, all authorized users are using the same group name and password. This user- 
name and password enables the user to access the VPN but the user will have to enter 
an authorized username and password to actually establish a VPN connection. The 
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certification authentication is used to verify whether the client is authorized to estab- 
lish the VPN. The client must have this in their computer (installed or downloaded). 
This is the first step before the VPN tunnel is set up. Figure 8-43 (b) shows additional 


properties for the VPN connection. This window indicates that IPsec over UDP has 
been selected. 


# YPN Client | Properties for “Off-Campus” 


Connection Ertiy: [Ol-Campus 


+ VPN Client | Properties for “Off-Campus” 


Correction Ertiy [On-Campus 


- tetetyl Aftts 
Description: [access to Chile-VPN al s dy Descigion | access to Chile-VPN Me au 


Host [192.6578 142 Host [1926570142 
‘Authentication: | Transport | Backup Servers | DiatUp | 


M Eneble Trensparent Turreing 
@ IPSec over UDP (| NAT / PAT ) 
© |PSec ove TCP TCP Port foo 


@ Group Authentication © Mutual Group Authentication 


C Certificate Authentication I Bilow Local LAN Access 


Name [ =] Peer pesponse timeout {seconds} [39 


I Send CA Ceetiicate Chain 





Erase User Password 
(a) (b) 


FIGURE 8-43 The Properties window for the VPN client. 


The next window, shown in Figure 8-44, lists the statistics for the VPN session. 
The IP addresses for both the VPN server and client are listed. This screen indicates 
that a 168-bit 3-DES encryption is being used and the authentication type is HMAC- 
MDS. 3-DES is called Triple DES, and it uses the same procedure as DES except the 
encryption procedure is repeated three times, hence the name. HMAC-MD5 (the 
keyed-Hash Message Authentication Code) is a type of message authentication code 
(MAC) that is being used with the MD5 cryptographic function. This window also 
shows that UDP port 10000 is being used. 


# VPN Client | Statistics 
‘Tunnel Details! | Route Details | Firewall | 


Address Information Connection Information 
Client: 172.16.30.2 On-Campus 
Server 172.16.30.15 ime: 0 day(s}. 01:54.34 
Bytes 
Received: 5155815 Eneryption: 168-bit 3-DES 
Sent: 770742 Authentication: HMAC-MD5 


Packets Transport 
Encrypted: 6041 Transparent Tunneling Active on UDP port 10000 
Decrypted:10198 Local LAN: Disabled 
Discarded: 10660 Compression: None 
Bypassed: 1857 





FIGURE 8-44 The Statistics window for the VPN client. 
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This section has demonstrated the setup and configuration of three different 
types of VPN connections. The first presented was a router-to-router VPN tunnel. The 
next was setting up a VPN link from a VPN client to a VPN server. The client con- 
figuration was demonstrated for Windows Vista/XP and Mac OS X. The last config- 
uration was using the Cisco VPN Client software. This requires setting up the 
software on both a server and client computer. Each type of VPN connection has its 
use, and the network administrator must be familiar with each approach. 


8-7 WIDE AREA NETWORK ROUTING 


This section and section 8-8 examine the routing issues for wide area network (WAN) 
and Internet routing. Sections 8.2—8.6 examined applications of the communication 
technologies and making the connections to the networks being used when configur- 
ing WANs. The focus has been on the major WAN communication technologies and 
WAN networks currently in use. 
WAN connections typically link remote sites and branch offices to the main 
network. These links usually have slower connection speeds than LAN connections 
and usually incorporate smaller and less powerful routers. It is critical that the net- 
work administrator be aware of these limited resources when choosing a routing pro- 
tocol for a link to a WAN. 
The easiest routing protocol for WAN links is the static route. At the main site 
you need a static route for each subnet at the remote end, as shown in Figure 8-45. At 
the remote site you also need a default static route. Each remote site router has a sta- 
tic route, attached to the network’s WAN router, that goes back to the main network. 
No routing updates are passed across the link, and the routing table is very small and 
takes up very little memory in the router. This works well for single connections to 
the remote sites, as shown in Figure 8-45. For multiple connections you should use a 
dynamic routing protocol such as OSPF or EIGRP. 
When choosing the routing protocol you must be cautious about the amount of 
routing updates traversing the link. Remember that distance vector protocols send the 
entire routing table at set intervals. RIP typically sends routing table updates every 30 
seconds. This is an issue when large routing tables are exchanged. In some cases, the 
exchange of the routing table traffic could consume more than an acceptable amount 
of data bandwidth. OSPF and EIGRP are more desirable protocols because they send 
updates only when routing changes occur. 
The size of the router at the remote site will also play a part in the routing pro- Stubby Areas 
tocols you implement. The amount of memory in the remote routers is usually smaller Do not accept routes from 
than in the LAN routers. Therefore, the size of the routing table that can be passed to the Internet 
the remote site might need to be smaller than the routing table at the LAN site. Ac- 
cess lists (see Chapter 10) can be used to filter out routes passed to the remote sites. pees Aay Pies 
se only a default route to 
Route filters or access lists are implemented in most modern routers, including Cisco feach destinations external 
routers. The procedures for configuring access lists are examined in Chapter 10. to the autonomous system 
Some routing protocols, such as OSPF, have built-in functions to filter out routes. 
These are called stubby areas and totally stubby areas. Stubby areas give only in- 
terarea routes and do not accept routes from the external network, that is, routes from 
the Internet. Totally stubby areas use only a default route to reach destinations exter- 
nal to the autonomous system (AS). For a more detailed discussion of route filters and 
OSPF routing, you should seek out a routing reference book. 
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10.10.20.2 STATIC ROUTE 
` IP route 192.168.1.0 
255.255.255.0 
10.10.20.1 


Remote Site A 


10.10.20.1 







12.168.1.0 10.50.20.1 ep INOUE 
ce ė IP route 192.168.1.0 
Va 25.0 
MAIN [~ 10.50.20.2 10.50.20.1 
10.100.20.1 

Remote Site B 
STATIC ROUTE 

IP route 192.168.1.0 

Doane 991255 .0 
10.100.20.2 10.100.20.1 


Remote Site C 


FIGURE 8-45 An example of configuring the static routes for the remote ends on a WAN. 


8-8 INTERNET ROUTING 


BGP Configuring an Internet connection is similar to configuring a WAN connection. The 

Border Gateway Protocol Internet connection can use the same type of link. For example, the link to the Inter- 
net could be made using a T1 connection or a high-speed link such as a DS-3 (44.7 
Mbps) or OC-3 (155 Mbps). WAN connections typically connect sites that belong to 
the same organization, such as a branch office of a business. Internet connections are 
usually between an Internet service provider (ISP) and its customers. Typically, the 
ISP and its customers do not use routing protocols such as OSPF for the Internet con- 
nection because these protocols do not scale well to this type of implementation. In- 
stead, the two main routing protocol options that are available for making the Internet 
connection to the ISP are static routes and BGP, the Border Gateway Protocol. 


Multi-homed Static routes are implemented in the same fashion as in the WAN routing sec- 
This means the customer has tion. The procedure for configuring static routes was presented in Chapter 7. Static 
more than one Internet routes are used only when the customer has a single Internet connection. If the cus- 
connection. tomer is multi-homed, meaning the customer has more than one Internet connection, 


BGP is used. The most current version of BGP is version 4. An example of a single 
and multi-homed customer is provided in Figure 8-46. 
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FIGURE 8-46 An example of (a) a single Internet connection and (b) a customer that is 
multi-homed. 


BGP is considered to be an external routing protocol. This protocol is designed AS 

for routing between separate organizational networks. The BGP term for these net- Autonomous systems 
works is autonomous systems, or AS. An AS is assigned an AS number (ASN) by the 
same organization that assigns North American IP addresses, ARIN. The ASN has a = 

Autonomous systems number 
different use than the ASN used in such IGP protocols as EIGRP and IGRP. The ASN 
in BGP is used to distinguish separate networks and to prevent routing loops. Each Peering 
router participating in BGP must manually make a peering with its BGP neighbor. How an agreement is made 
Peering is an agreement made for the exchange of data traffic between large and small for the exchange of data 
ISPs or, as in this case, between a router and its neighbor router. The agreement on traffic between large and 
peering is how different networks are joined to form the Internet. The network ad- small ISPs or between a 
ministrator configuring the Internet connection must know the remote IP address and "Outer and its neighbor 
ASN to make this peering. An AS path is created when a network is connected. This couter 
is demonstrated in the next subsection. (Note: If BGP routers in the same AS peer iBGP 
with each other, that is, have the same ASN, this is called iBGP, or internal BGP, Internal Border Gateway 
whereas the BGP between separate ASs is called eBGP, or external BGP. The proto- Protocol 
cols are collectively referred to as BGP.) 

ASNs have a set of numbers reserved for private use. These numbers are 64512 eBGP 

through 65535 and cannot be passed into the Internet. For this section the configura- External Border Gateway 
tions presented will use the private ASN numbers. Protocol 


Configuring BGP 


This section demonstrates how to configure a router to run BGP for connecting to an 
ISP. Figure 8-47 illustrates the example network for this section. This is typical of the 
customer’s connection to the ISP. In this example, the steps for configuring both the 
ISP router (Router-ISP) and the customer’s router (RouterB) will be shown. In prac- 
tice, however, the ISP router (Router-ISP) will be configured by the networking per- 
sonnel with the ISP. This exercise begins with configuring the configuration of the 
ISP’s router (Router-ISP). 
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Customer ISP 


a 50 a s0 172.160.0.0 
EEE LEE 
aw 192.168.1.2 192.168.1.1 fey 


RouterB Router-ISP 
Customer ISP 





FIGURE 8-47 A BGP connection to an ISP. 


The ISP has assigned an IP address of 192.168.1.1 for the interface that con- 
nects to the customer. The customer is assigned an IP address of 192.168.1.2. The ISP 
typically takes the .1 assignment and assigns the customer the .2 address. Enter the 
router’s configuration mode using the conf t command from the privilege EXEC 
prompt as shown. Next, enter the configuration mode for the router’s serial interface 
that connects to the customer. In this example, serial interface 1 on the ISP’s router is 
being used for the connection; therefore, enter the command int ser I. 


Router-ISP# conf t 
Router-ISP(config)# int ser 1 


Next enter the IP address for the connection to the customer with a subnet mask 
of 255.255.255.252. Recall from Chapter 5 that a subnet mask of 255.255.255.252 
provides for two usable host IP addresses in the subnet. This is adequate for the con- 
nection to the customer. The command ip address [ip address] [subnet mask] is used 
to configure the Seriall interface with the specified IP address and subnet mask. The 
ISP will typically have multiple customer connections; therefore, it is a good idea to 
document the IP address entry using the command description. This command is used 
to enter a comment in the router’s configuration file about an interface configuration. 
For example, the Seriall interface is being configured for the connection to customer 
B. The router has been placed in the (config-if)# mode. The entry description Cus- 
tomer B is entered so that the network administrator of the ISP knows what the Ser- 
iall interface is being used for. Documentation of the router’s configuration file is 
extremely important. 


Router-ISP(config-if)#ip address 192.168.1.1 255.255.255.252 
Router -ISP(config-if)#description Customer B 


The next step is to configure the router to run BGP. The ISP has been assigned 
the AS number of 65001. (Note: This is actually a private AS number. In practice the 
ISP is assigned a public AS number.) The AS number is used when entering the com- 
mand for BGP. In this example, the command router bgp 65001 is entered. The com- 
mand network 172.16.0.0 follows, which instructs the router to advertise the 
172.16.0.0 network to its BGP peers. The next command is for specifying the IP ad- 
dress of the BGP neighbor. This is the IP address of the SerialO interface on the cus- 
tomer’s RouterB. The format for the command is neighbor [ip address] remote AS 
number [neighbor’s AS number]. The last command is for entering a description of 
the entries. The comment neighbor 192.168.1.2 description Customer BGP is used to 
document the router configuration for the neighbor IP address for the customer and 
that the routing protocol is BGP. 

Router -ISP(config)#router bgp 65001 

Router -ISP(config-router)#network 172.16.6.6 

Router -ISP(config-router)#neighbor 192.168.1.2 remote-as 65002 


Router -ISP(config-router)#neighbor 192.168.1.2 description Customer B 
BGP 
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The command sh ip int brief can be used to check the configuration for the in- 
terface. This shows that the ISP’s router Seriall interface has been configured and is 


connected. 
Router-ISP#sh ip int brief 
Interface IP-Address OK? Method Status Proto- 
col 
FastEthernet®@/0 unassigned YES unset administratively down down 
SerialQ unassigned YES unset up down 
Serialt 192.168.1.1 YES manual up up 


The next example demonstrates the steps for configuring the customer’s router 
(RouterB). The customer receives an IP address and subnet mask for the serial inter- 
face from the ISP when the connection is requested and after the connection is con- 
figured by the ISP. The customer will enter the configurations provided by the ISP. 

The first step on the customer’s router is to enter the router’s configuration 
mode using the conf t command from the privilege EXEC prompt as shown. Next, 
enter the configuration mode for the router’s serial interface that connects to the ISP. 
In this example, serial interface O is being used for the connection; therefore, enter 
the command int ser 0. 

RouterB# conf t 


Enter configuration commands, one per line. End with CNTL/Z. 
RouterB(config)#int ser @ 


Next configure the serial interface’s IP address and subnet mask. In this case, 
the ISP assigned an IP address of 192.168.1.2 with a subnet mask of 
255.255.255.252. (Note: It is a good idea to document your entries into the router’s 
con figuration by using the command description (descr).) The entries for the IP ad- 
dress and the description are shown. 


RouterB(config-if)#ip address 192.168.1.2 255.255.255.6 
RouterB(config-if)#deser ISP Connection 


The customer has been assigned the AS number of 65002. (Note: This is actu- 
ally a private AS number. In practice the customer is assigned a public AS number.) 
The AS number is used when entering the command for the BGP routing protocol. In 
this example, the command router bgp 65002 is entered. The command network 
10.0.0.0 follows, which instructs the router to advertise the Border Gateway Protocol 
over any interfaces with an IP address in the 10.0.0.0 network. The next command is 
for specifying the IP address of the BGP neighbor. This is the IP address of the Ser- 
iall interface on the ISP’s RouterA. The format for the command is neighbor [ip ad- 
dress] remote AS number [neighbor’s AS number]. The last command is for entering 
a description of the entries. The comment neighbor 192.168.1.1 descr ISP BGP is 
used to document the router configuration. The description identifies the neighbor IP 
address (the ISP) and comments that the routing protocol is BGP. 

RouterB(config)#router bgp 65602 

RouterB(config-router)#network 180.6.6.6 

RouterB(config-router)#neighbor ? 

A.B.C.D Neighbor address 

WORD Neighbor tag 

RouterB(config-router)#neighbor 192.168.1.1 remote-as ? 

<1-65535> AS of remote neighbor 


RouterB(config-router)#neighbor 192.168.1.1 remote-as 65001 
RouterB(config-router)#neighbor 192.168.1.1 descr ISP BGP 
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After completing the router configuration, the next step is for the customer to 
ping the ISP using the IP address provided by the ISP. In this example, the ISP’s IP 
address is 192.168.1.1. 


RouterB#ping 192.168.1.1 
Type escape sequence to abort. 
Sending 5 10@-byte ICMP Echos to 192.168.1.1, timeout is 2 seconds: 


Success rate is 100 percent (5/5), round-trip min/avg/max 32/35/36 ms 


This test verifies that the routers are connected. The command sh ip bgp sum 
can be used to see whether the routers are exchanging routes: 


RouterB#sh ip bgp sunm 

BGP router identifier 192.168.1.2, local AS number 65002 
BGP table version is 3, main routing table version 3 

1 network entries and 1 paths using 121 bytes of memory 
1 BGP path attribute entries using 92 bytes of memory 
BGP activity 3/2 prefixes, 3/2 paths 

© prefixes revised. 


Neighbor V AS MsgRcvd MsgSent TbhlVer InQ OutQ Up/Down 
State/PfxRcd 

192.168.1.1 4 65001 10 12 Q © Q 00:00:09 
Idle 


RouterB#sh ip bgp summ 

BGP router identifier 192.168.1.2, local AS number 65002 
BGP table version is 3, main routing table version 3 

1 network entries and 1 paths using 121 bytes of memory 
1 BGP path attribute entries using 92 bytes of memory 
BGP activity 3/2 prefixes, 3/2 paths 

© prefixes revised. 


Neighbor V AS MsgRcvd MsgSent TblVer InQ OutQ Up/Down 
State/PfxRcd 

192.168.1.1 4 65001 10 12 Q Q © 00:00:20 
Active 


The first screen shows a status of Idle. The second screen shows a status of Ac- 
tive. The screens indicate a local AS number of 65002 and a neighbor IP address of 
192.168.1.1. Entering the command sh ip bgp summ now shows a 1 in the place 
where /dle and Active were present. This indicates the router is exchanging routes. 


RouterB#sh ip bgp summ 

BGP router identifier 192.168.1.2, local AS number 65002 
BGP table version is 5, main routing table version 5 

2 network entries and 2 paths using 242 bytes of memory 
2 BGP path attribute entries using 188 bytes of memory 
BGP activity 4/2 prefixes, 4/2 paths 

© prefixes revised. 


Neighbor V AS MsgRcvd MsgSent TbhlVer InQ OutQ Up/Down 
State/PfxRcd 
192.168.1.1 4 65001 24 27 5 Q Q 00:05:31 1 


The command sh ip route can be used to examine the customer’s routing table 
as shown. The table shows that the Border Gateway Protocol (B) is advertising the 
172.16.0.0 network via 192.168.1.1. The 172.16.0.0 network is directly attached to 
the ISP’s router. BGP(B) is also running on the customer’s 10.0.0.0 network: 


RouterB#sh ip route 

Codes: C connected, S static, I IGRP, R RIP, M mobile, B BGP D 
EIGRP, EX EIGRP external, O OSPF, IA OSPF inter area 

Ni OSPF NSSA external type 1, N2 OSPF NSSA external type 2 

E1 OSPF external type 1, E2 OSPF external type 2, E EGP 

i IS-IS, L1 IS-IS level-1, L2 IS-IS level-2, * candidate default 
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U per-user static route, o ODR T traffic engineered route 
Gateway of last resort is not set 

B 172.16.0.0/16 [20/0] via 192.168.1.1, 00:01:17 

10.0.0.0/24 is subnetted, 1 subnets 

D 10.@.0.@ is directly connected, Seriali 

C 192.168.1.0/24 is directly connected, Serial® 


The show running-configuration (sh run) command can be used to examine 
the changes made to the router’s configuration file. A partial example of the cus- 
tomer’s running-configuration file is shown in the following code. Don’t forget to 
save the file to NVRAM after the changes have been verified. 


RouterB# sh run 


interface Seriald 
description ISP Connection 
ip address 192.168.1.2 255.255.255.0 


no ip directed-broadcast 
! 


router eigrp 100 


network 100.0.0.0 

! 

router bgp 65002 

network 100.0.0.0 

neighbor 192.168.1.1 remote-as 65001 
neighbor 192.168.1.1 description ISP BGP 
! 


Networking Challenge—BGP 


Use the Net-Challenge simulator software included with the text’s companion CD- 
ROM to demonstrate that you can configure BGP for a router connection to an Inter- 
net service provider. The network connection is displayed on the screen when the 
BGP challenge is started. Place the companion CD-ROM in your computer’s drive. 
Open the Net-Challenge folder, and click net challenge.exe. When the software is 
running, click the Select Challenge button to open a Select Router Challenge drop- 
down menu. Select Chapter S—BGP. This opens a checkbox that can be used to ver- 
ify that you have completed all the tasks. This task assumes that a connection to the 
Internet cloud has already been established. 


Enter the privileged EXEC mode on the router. 

Enter the router configuration mode [the Router(config)# prompt]. 

Set the hostname to Border-Router. 

Configure the Fast Ethernet 0/0 interface on Border-Router with the following: 

IP address 10.10.1.2; subnet mask 255.255.255.0 

Enable the router’s Fast Ethernet 0/0 interface. 

6. Configure the SerialO/O interface with the following: IP address 192.168.1.2; 
subnet mask 255.255.255.0. 

7. Enable the router’s Serial0/0 interface. 

8. Use the router’s description command (descr) to indicate that this interface is 
the ISP Connection. (Note: The text ISP Connection is case-sensitive.) 

9. Enable BGP on the router with an AS number of 65002. 


ee 
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10. Configure Border-Router’s BGP neighbor with a remote AS of 65001. 

11. Configure a BGP route to the 10.0.0.0 network. 

12. Use the show ip route command to verify that the route from Border-Router to 
the ISP is configured. 

13. Use the ping command to verify that the 192.168.1.1 interface is connected. 

14. Use the sh run command to view the running-configuration file on Border- 
Router. Verify that BGP is enabled, the description [SP Connection has been 
entered, and the proper network address is specified for the ISP connection. 

15. Use the sh ip int brief command to check the interface status. 


8-9 ANALYZING INTERNET DATA TRAFFIC 


NOC A campus network operations center (NOC) receives many emails and calls about 
Network operations center suspected problems with the network. Many times network problems are due to op- 
erational errors by the users and possible hacker attacks. Occasionally, network 
equipment failure can be causing the problem. The bottom line is that the network ad- 
ministrator must have some expected performance measure of the network. The ad- 


Outbound Data Traffic 
Data traffic leaving the 


EENOK ministrator will want to know the expected normal usage of the network, what type(s) 
Inbound Data Traffic of normal data traffic is expected, what is typical of outbound and inbound Internet 
Data traffic entering the data traffic, and who are the “big” data users on the network. Outbound data traf- 
network fic is data leaving the network and inbound data traffic is data entering the network. 


This section provides an overview of the Internet data traffic patterns a NOC might 
monitor. These patterns are only examples of data traffic activity for a network. Data 
traffic patterns will vary significantly for each network, and each network will have 
its own typical data traffic. Also, data traffic will change during the day. Examples of 
this are presented in Chapter 9 in section 9-6. The data traffic images shown in this 
section were captured using the Finisar Surveyor Demo Portable Surveyor. 

The first capture, shown in Figure 8-48, is a composite view of the data traffic 
activity for an Internet connection to and from a campus network. The image has four 
screens showing various data traffic information. This screen setup might be typical 
of the screen display at a network monitoring center. This does not imply that some- 
one watches the screen continually, but the screen is looked at when a possible data 
traffic problem is mentioned. 


Utilization/Errors Strip Chart 


One of the areas NOC monitors is the typical percentage utilization of the network 
bandwidth. Figure 8-49 is a utilization/errors chart of an Internet feed to and from a 
campus network. The Utilization/Errors Strip chart shows that the network is running 
about 60—65 percent utilization and no errors are reported. This is a 45 Mbps network; 
therefore, the utilization is about 30 Mbps. Is this a good percentage of utilization? 
You can’t answer this from the picture, but you can answer it if you know the ex- 
pected utilization of your network. In this example, the network operations center ex- 
pects an average of about 60 percent utilization of their Internet feed. The graph 
shows the utilization is within this range, so a quick glance at the screen indicates that 
the utilization is typical. This demonstrates why you need to learn and know the ex- 
pected utilization of your network. The utilization chart shows stable behavior dur- 
ing the brief time it was monitored. There are peaks and valleys in the network 
utilization, but this is to be expected. Downloading large files from the Internet will 
temporarily increase the network utilization. 
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FIGURE 8-49 The Finisar-Shomiti Utilization/Errors strip chart. 


Network Layer Matrix 


The top 10 network layer conversations on the campus Internet feed are shown in Fig- IPX 

ure 8-50. The chart is obtained by starting the Surveyor program, starting a capture, Novell's Internetworking 
and clicking Capture View-Monitor Views-Network Layer Matrix. The network Packet Exchange networking 
layer is layer 3 in the OSI model, and this is the layer where IP addressing is defined. protocol 

The monitoring software is reporting 1024 IP conversations and 8 IPX conversations. 

IPX is Novell’s Internetworking Packet Exchange networking protocol. The top con- 

versation is between the machines at IP addresses 192.168.15.25 and 10.10.20.2. The 

10.10.20.2 machine is on the home 10.0.0.0 network. This one conversation is con- 

suming more than 1.5 percent of the network’s Internet bandwidth. This chart provides 
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the network administrator with a quick look at which host computer is tying up the 
network resources. It is not possible to make a reasonable guess if this is a normal net- 
work layer graph for your network by looking at only this one picture. This requires 
that the network administrator develop knowledge of expected behavior over a long 
term. 





FIGURE 8-50 The Network Layer Matrix graph. 


Notice that the machine with the IP address of 10.10.20.2 is listed three times 
in the top ten conversations. The 10.10.20.2 machine is a Web server on the 10.0.0.0 
network, and it is expected that this machine will experience a fair amount of data 
activity. 


Network Layer Host Table 


The network layer host table (see Figure 8-51) provides a look at the top ten network 
stations. The information is plotted by the IP address of the host (computer). Notice 
that the IP addresses for seven of the network stations are outside the 10.0.0.0 net- 
work. Remember, the 10.0.0.0 IP address is the network address for the home net- 
work of the campus LAN discussed in this text. This indicates that the network 
consumes more data traffic than it exports to the Internet. 





FIGURE 8-51 The Network Layer Host table. 
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Frame Size Distribution 


Figure 8-52 shows the frame size distribution of packets in bytes being delivered to 
and from the campus network’s Internet connection. The average frame size is 1132, 
which is listed at the top of the chart. The frame sizes for Ethernet packets are lim- 
ited to 1500. The frame size distribution for this network has a somewhat “J” shape. 
The “J” in this case is skewed by the large percentage of frame size in the 1024-1518 
frame size range. A “J” shape is expected because many small data frames are ex- 
pected for negotiating the transfer of data over the network (frame size 65—127) and 
then many large frames for exchanging the data (frame size 1024—1518). There is a 
small peak with the 65-127 frame size, the few 128—255 and 256-511 frame size 
packets, and the frame sizes then begin to increase at 512—1023 and then the larger 
increase in the 1024-1518 region. The graph shows few data packets in the >1518 
region. 
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FIGURE 8-52 The Frame Size Distribution graph. 
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SUMMARY 


This chapter presented the fundamentals of wide area networking. The student should 
understand and appreciate the role that the PSTN (public switched telephone net 
work—telco) plays in wide area networking. Many associated issues and technolo- 
gies have been presented. This chapter has only introduced a fraction of the tech- 
nologies and issues needed to be understood by an Internet expert such as a Cisco 
Certified Internet Expert (CCIE). However, the chapter has tried to address the fun- 
damental or base knowledge needed for a networking administrator to start working 
in this field. 
The student should understand the following: 


bd 


The basics of a line connection to the telco 

How Frame Relay works and the basic steps for configuring a Frame Relay in- 
ter face 

The basics of establishing an ATM connection 

The technologies used for establishing a dial-up connection to a network 
How to configure a VPN connection 

The fundamental concept of wide area networking 

The issues for Internet routing 


a 
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QUESTIONS AND PROBLEMS 


Section 8-2 


What is the data rate of a DS-3 line? 

What is the data rate of a T1 line? 

Define the telco cloud. 

Define fractional T1. 

Define point of presence. 

Explain the difference between line of demarcation and point of presence. 
A CSU/DSU has a blue alarm. What does this indicate? 

What is ESF? Define the term. 

What is the function of the 24 ESF framing bits? 

What is BSZS and how does it work? 

The options for data encapsulation on a Cisco router can be viewed by entering 
what command? Show the router prompt. 
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Section 8-3 


12. A user requests a Frame Relay T1 data service with a CIR of 768 kbps. What 
does this mean? 

13. What is the purpose of the dlci tag? 

14. Draw a picture of a point-to-point connection to the Frame Relay cloud. 

15. Who provides the Frame Relay connection 1f the connection involves more than 
one telco? 

16. What is the router command to instruct the interface for Frame Relay? 
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17. What does the router command int s0.1 point-to-point do? 

18. A telco provides a dlci number of 150 for a Frame Relay connection. List the 
router command to configure the assigned dlci number. 

19. A ping command is used to check a Frame Relay connection. What IP address 
is pinged? 


Section 8-4 


20. Define the byte structure for an ATM cell. 

21. What is the VCC and its purpose? 

22. What is VPI used for? 

23. What type of encapsulation is typically specified to transport TCP/IP data traf- 
fic over ATM? 
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24. What is the bandwidth of a voice channel in the public switched telephone 
network? 

25. Why is the data transfer for V.92/V.90 called asymmetric operation? 

26. What are the data speeds for V.44/V.34 and V.92/V.90? 

27. Cable modems use a technique called ranging. Define this term. 

28. What are the data rates for basic access service ISDN and the ISDN primary 
access channel? 

29. What is ADSL and what are its data rates? 

30. Define discrete multitone. 

31. What is the purpose of a remote access server? 

32. Define PPP and state its purpose. 
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33. What is the goal of a VPN tunnel? 

34. Draw a sketch of the encapsulation of a VPN data packet. Show the IP source 
and destination address and the VPN tunnel source and destination address en- 
capsulated with the IP packet. 

35. What is the command for adding a tunnel 0 to a router? Show the router prompt. 

36. List the two router commands for specifying the tunnel destination and source 
IP address. Include the router prompt. 

37. The command show ip int brief is used to check the configuration of a VPN 
tunnel on a router. The router displays the following: 





Interface IP address OK? Method Status Protocol 
Tunnel @ 10.10.20.5 YES manual up up 


Is the tunnel link working properly? Justify your answer. 

38. What router command can be used to check to see whether tunneling has been 
configured on a router? 

39. Explain the expected difference when running a traceroute from the home net- 
work to the remote user using the IP address for the remote user’s router inter- 
face, and then running a traceroute from the home network to the remote user’s 
VPN tunnel address. 
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40. List five steps for troubleshooting the VPN tunnel link. 


41. Identify two tunneling protocols that can be used to configure a remote user’s 
PC. 
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42. What is the purpose of a wide area network connection? 
43. What is the easiest routing protocol to use for WAN links? What if there are 
multiple connections to the remote sites? 
44. Define the following: 
a. Stubby areas 
b. Totally stubby areas 
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45. A multi-homed customer has 
a. A single internet connection 
b. More than one Internet connection 
c. Static routes 
d. None of the above 
46. BGP is considered to be 
a. An external routing protocol 
b. An internal routing protocol 
c. Used for routing between the same networks 
d. Outdated 
47. The router command used for entering a description is 
a. Comment 
b. J 
C= 
d. Description 
48. What does the router command router bgp 65003 mean? 
49. Write the router command for specifying the IP address of the BGP neighbor. 
Also show the router prompt. 
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50. Define the following: 
a. Outbound data traffic 
b. Inbound data traffic 
51. What is an expected percentage utilization for a network? 
52. The protocol analyzer shows that the average frame size of data packets being 
delivered to and from the campus network’s Internet connection is 1203. Is this 
a reasonable average? Justify your answer. 
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Critical Thinking 


53. What is a cloud? 
54. Your supervisor informs you that a user on the network has requested a VPN 


connection. Prepare a response to the supervisor discussing what is needed to 
provide the connection. 
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OBJECTIVES 


e Understand the purpose of the three layers of 
a campus network design 

e Understand the auxiliary services needed to 
operate a network, such as DHCP and DNS 


e Understand how to use SNMP tools for net- 


work management 


e Understand the process of requesting an IP 


e Investigate how to use network data packet 
statistics to monitor network performance 
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9-1 INTRODUCTION 


The objective of this chapter is to examine the computer networking issues that arise 
when planning a campus network. The term campus network applies to any network 
that has multiple LANs interconnected. The LANs are typically in multiple buildings 
that are close to each other and are interconnected with switches and routers. 

The previous chapters introduced the fundamental issues of computer net- 
works. These included techniques for configuring the LAN, analyzing TCP/IP data 
traffic, router configuration, configuring the wide area network connection, and se- 
lecting and configuring the routing protocols. This chapter looks at the planning and 
design of a simple campus network, including network design, IP assignment and 
DHCP, domain name service (DNS), network management, switch and VLAN con- 
figuration, and analyzing a campus network’s data traffic. 

The basics of configuring the three layers of a campus LAN (core, distribution, 
and access) are first examined in section 9-2. This section also addresses the impor- 
tant issues of data flow and selecting the network media. IP allocation and configur- 
ing DHCP service are examined in section 9-3. This includes a step-by-step 
description of the process of how a computer obtains an IP address manually or via 
DHCP in a network. Section 9-4 examines the issues of configuring DNS service for 
a campus network. The concepts of the root servers, the top level domains, and the 
subdomains are examined. The next section (9-5) addresses network management. 
An overview of configuring a Cisco router for SNMP operation is first presented. 
This section includes an example of using SNMP management software to collect 
router information and data statistics. This section also provides an overview of 
Power over Ethernet (PoE). Section 9-6 examines configuring a VLAN for use in a 
campus network. Basic switch commands in addition to configuring a static VLAN 
are presented. This section also discusses the Spanning-Tree Protocol (STP). The 
chapter concludes with an example of using data collected with an SNMP manage- 
ment program to monitor network data traffic. 


9-2 DESIGNING THE CAMPUS NETWORK 


Most campus networks follow a design that has core, distribution, and access layers. 
These layers (Figure 9-1) can be spread out into more layers or compacted into fewer 
depending on the size of these networks. This 3-layer network structure is incorpo- 
rated in campus networks to improve data handling and routing within the network. 
The issues of data flow and network media are examined here. 


Core Layer 


Core The network core usually contains high-end layer 3 switches or routers. The core is 

The backbone of the network the heart or the backbone of the network. The major portion of a network’s data traf- 
fic passes through the core. The core must be able to quickly forward data to other 
parts of the network. Data congestion should be avoided at the core if possible. This 
means that unnecessary route policies should be avoided. An example of a route pol- 
icy is traffic filtering, which limits what traffic can pass from one part of a network 
to another. Keep in mind that it takes time for a router to examine each data packet, 
and unnecessary route policies can slow down the network’s data traffic. 
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It was mentioned that high-end routers and layer 3 switches are typically se- 
lected for use in the core. Of the two, the layer 3 switch is probably the best choice. 
A layer 3 switch is essentially a router that uses electronic hardware instead of soft- 
ware to make routing decisions. The advantage of the layer 3 switch is the speed at 
which it can establish a network connection. 
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FIGURE 9-1 The core, distribution, and access layers of a campus network. 


Another alternative for networking hardware in the core is a layer 2 switch. The 
layer 2 switch does not make any routing decisions and can quickly make network 
connection decisions based on the network hardware connected to its ports. The ad- 
vantage to using the layer 2 switch in the core is cost. The disadvantage is that the 
layer 2 switch does not route data packets. High-speed layer 2 switches are more af- 
fordable than high-speed routers and layer 3 switches. 

An important design issue in a campus network and the core is redundancy. Re- 
dundancy provides for a backup route or network connection in case of a link failure. 
The core hardware is typically interconnected, as shown in Figure 9-1, to all distrib- 
ution network hardware. The objective is to ensure that data traffic continues for the 
whole network even if a core networking device or link fails. 

Each layer beyond the core breaks the network into smaller networks with the 
final result being a group of networks that are capable of handling the amount of traf- 
fic generated. The design should thus incorporate some level of redundancy. 


Distribution Layer 


The distribution layer in the network is the point where the individual LANs con- Distribution Layer 
nect to the campus network routers or layer 3 switches. Routing and filtering policies Point where the individual 
are more easily implemented at the distribution layer without having a negative im- LANs connect together 
pact on the performance of the network data traffic. Also, the speed of the network 

data connections at the distribution layer are typically slower than at the core. For 
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example, connection speeds at the core should be the highest possible, such as 1 or 
10 gigabits, where the data speed connections at the distribution layer could be 100 
Mbps or | gigabit. Figure 9-1 shows the connections to the access and core layers via 
the router’s Ethernet interfaces. 


Access Layer 


Access Layer The access layer is where the networking devices in a LAN connect together. The 
Where the networking network hardware used here is typically a layer 2 switch. Hubs can be used but are 
devices in a LAN connect not recommended in any networks with significant amounts of data traffic. Remem- 
together ber, a switch is a better choice because it forwards data packets directly to destination 


hosts connected to its ports. Network data traffic is not forwarded to all hosts in the 
network. The exception to this is a broadcast that is sent to all hosts connected to the 
switch. Refer back to Chapter 4 for a review and a comparison of switch and hub op- 
erations. 


Data Flow 


An important networking issue is how data traffic flows in the core, distribution, and 
access layers of a campus LAN. In reference to Figure 9-1, if computer Al in LAN 
A sends data to computer D1 in LAN D, the data is first sent through the switch in 
LAN A and then to RouterA in the distribution layer. RouterA then forwards the data 
to switch A or switch B. Switch A or switch B will then forward the data to RouterC. 
The data packet is then sent to the destination host in LAN D. 

The following are some questions often asked when setting up a network that 
implements the core, distribution, and access layers. 


e In what layer are the campus network servers (Web, email, DHCP, DNS, etc.) 
located? This varies for all campus networks and there is not a definitive an- 
swer. However, most campus network servers are located in the access layer. 

e Why not connect directly from RouterA to RouterC at the distribution layer? 
There are network stability issues when routing large amounts of network data 
traffic if the networks are fully or even partially meshed together. This means 
that connecting routers together in the distribution layer should be avoided. 

e Where is the campus backbone located in the layers of a campus network? The 
backbone of a campus network carries the bulk of the routed data traffic. Based 
on this, the backbone of the campus network connects the distribution and the 
core layer networking devices. 


Selecting the Media 


The choices for the media used to interconnect networks in a campus network are 
based on several criteria: 


e Desired data speed 
e Distance for connections 
e Budget 


The desired data speed for the network connection is probably the first consideration 
given when selecting the network media. Twisted-pair cable works well at 100 Mbps 
and 1 Gbps and is specified to support data speeds of 10-gigabit data traffic over 
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twisted-pair cable. Fiber optic cable supports LAN data rates up to 10 Gbps or higher. 
Wireless networks support data rates up to 200+ Mbps. 

The distance consideration limits the choice of media. CAT 6/5e or better have 
a distance limitation of 100 meters. Fiber optic cable can be run for many kilometers, 
depending on the electronics and optical devices used. Wireless LAN connections can 
also be used to interconnect networks a few kilometers apart. 

The available budget is always the final deciding factor when planning the de- 
sign for a campus LAN. If the budget allows, then fiber optic cable is probably the 
best overall choice especially in the high-speed backbone of the campus network. The 
cost of fiber is continually dropping, making it more competitive with lower-cost net- 
work media such as twisted-pair cable. Also fiber cable will always be able to carry 
a greater amount of data traffic and can easily grow with the bandwidth requirements 
of a network. 

Twisted-pair cable is a popular choice for connecting computers in a wired 
LAN. The twisted-pair technologies support bandwidths suitable for most LANs, and 
the performance capabilities of twisted-pair cable are always improving. 

Wireless LANs are being used to connect networking devices together in LANs 
where a wired connection is not feasible. For example, a wireless LAN could be used 
to connect two LANs in a building together. This is a cost-effective choice if there is 
not a cable duct to run the cable to interconnect the LANs or if the cost of running the 
cable is too high. Also wireless connections are playing an important role with mo- 
bile users within a LAN. The mobile user can make a network connection without 
having to use a physical connection or jack. For example, a wireless LAN could be 
used to enable network users to connect their mobile computers to the campus net- 
work. This topic is examined in greater detail in Chapter 11. 


Load Balancing 


Load balancing is the concept of distributing the network data traffic over multiple Load Balancing 
interfaces so that one interface connection is not overloaded. It is also used as a tool Concept of distributing the 
to control the direction of the data flow when multiple routes are available. An ex- network data traffic over 
ample of load balancing is provided in Figure 9-1. In this case, data from LAN A go- multiple interfaces so that 
ing to LAN B will first pass through Router A at the distribution layer. The data will ©"€ interface connection is 
next travel to core Switches A or B. The data can all be sent to Switch A or Switch B "°t OVErOARAU aso MBEN gS 
; a tool to control the 
or can be split over both switches. directi 
irection of the data flow 
The selection of the data path leaving RouterA is determined by the “cost” of 
the data path. Remember, the “cost” of the route is typically based on the type of rout- 
ing protocol and the “speed” of the connection. For example in Figure 9-1, RouterA 
is running OSPF for all interfaces, and the cost associated with RouterA’s gigabit in- 
terface is lower than the cost of a RouterA’s FastEthernet interface. The cost of a route 
can be programmed into the router by issuing the following command from the con- 
fig-router prompt, ip ospf cost <number> where number is the cost of the network 
route ranging from 1 (lowest) to 65535 (highest). The lower the cost, the more pre- 
ferred the route. 
In this case, the cost of the route is being set by the network administrator who 
is using the cost metric to control the route of the data flow. For example, the com- 
mand for setting the cost of the RouterA ge-0/3/0 interface to 10 is a follows. (Note: 
This example assumes that RouterA is running ospf off the ge-0/3/0 interface.) 


RouterA<config-router># ip ospf cost 16 
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RouterA is also showing a link to Switch B off the ge-1/2/0 gigabit interface. 
If the primary data traffic at the core should travel through Switch A, then the path to 
Switch B should have a higher cost. For example, setting the cost off RouterA’s ge- 
1/2/0 interface to 20 will make the data path to Switch A ge-1/2/0 interface have a 
higher cost and therefore establish the ge-0/3/0 interface (cost = 10) as the primary 
route. 

What if the cost of both RouterA’s gigabit interfaces is set to 10? In this case, 
the routers will load balance automatically, and the data traffic will be split equally 
over both interfaces. Load balancing off the router can be set to work per-destination 
or per-packet. Per-destination load balancing means that the data packets coming 
from the router are distributed based on the destination address. This means that all 
data packets with the same destination are sent over the same interface. This tech- 
nique preserves the order of the packets but it does not guarantee equal load balanc- 
ing. Another type of load balancing is per-packet. In per-packet load balancing, load 
balance is guaranteed for all interfaces, but there is no guarantee that the packets will 
arrive at the destination in the proper order considering the data packet can take dif- 
ferent routes. 


9-3 IP ASSIGNMENT AND DHCP 


IP assignment is a process where subnets are created for each subgroup or depart- 
ment. The IP address assignment is typically tracked by the network operations cen- 
ter (NOC). The IP addresses are kept in a central log file so that NOC can 
troubleshoot network problems. For example, a machine could be causing network 
problems possibly due to hacked or corrupted software. NOC needs to be able to track 
down the network problem(s). The NOC database will have the MAC address, the IP 
address, and the name of the person who uses the computer. 

IP addresses are assigned by NOC based on where the subnet for the computer 
is located. The subnet could be in a building, a floor of the building, a department, 
and so on. The subnets are created by the network administrators based on the ex- 
pected number of users (hosts) in a subnet (refer back to Chapter 5). For example, the 
192.168.12.0 network shown in Figure 9-2 has been partitioned into four subnets. The 
network addresses for each of the subnets are provided in Table 9-1. Any computer 
in subnet B is assigned one of the 62 IP addresses from the range 192.168.12.65 to 
192.168.12.126. Remember, the first IP address in the subnet is reserved for the net- 
work address, and the last is reserved for the broadcast address. 


192.168.12.0 





0 subnet "64" subnet "128" subnet "192" subnet 


FIGURE 9-2 IP assignment of computers in a network’s subnet. 
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TABLE 9-1 Subnet Addresses for the Subnets Shown in Figure 9-2 


Subnet Network Address Broadcast Address 
A 192.168.12.0 192.168.12.63 

B 192.168.12.64 192.168.12.127 

C 192.168.12.128 192.168.12.191 

D 192.168.12.192 192.168.12.255 


IP assignment is done either manually or dynamically. In the manual process 
for IP assignment within a campus network, IP addresses are entered manually for 
each computer in the network. This is a tedious process that requires that a file be 
edited with all of the necessary information about the computer, including the MAC 
address, the IP address, and the user (or owner) of the computer. The owner is typi- 
cally the department or organizational unit within the campus LAN. This process can 
be automated to some extent using a program called BOOTP for IP assignment. 
BOOTP stands for Bootstrap Protocol, and it enables computers to discover their 
own IP addresses. When a client requests an IP address, it is assigned to the Ethernet 
address (MAC address) based on the BOOTP record. In this case, the IP and MAC 
addresses have a one-to-one relationship. 

DHCP (Dynamic Host Configuration Protocol) simplifies the steps for IP as- 
signment. DHCP’s function is to assign IP addresses from a pool to requesting 
clients. DHCP is a superset of BOOTP, and runs on the same port number. DHCP re- 
quests an IP address from the DHCP server. The DHCP server retrieves an available 
IP address from a pool dedicated to the subnet of the requesting client. The IP address 
is passed to the client and the server specifies a length of time that the client can hold 
the address. This is called the lease time. This feature keeps an unused computer 
from unnecessarily tying up an IP address. 

The process of requesting an IP address with DHCP 1s as follows: The client 
boots up and sends out a DHCP request. This is a broadcast, meaning that the mes- 
sage is sent to all computers in the LAN. A DHCP server listening on the LAN will 
take the packet, retrieve an available IP address from the address pool, and send the 
address to the client. The client applies the IP address to the computer and is then 
ready to make network connections. An example is provided in Figure 9-3. 


DHCP port #67 
UDP Protocol 
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FIGURE 9-3 An example of a DHCP server and client in the same LAN. 
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Unicast What if a DHCP server is on the other side of the router (for example, not in the 

The packet has a fixed same LAN)? Remember, routers don’t pass broadcast addresses, so the DHCP broad- 

destination cast is not forwarded. This situation requires that a DHCP relay be used, as shown in 
Figure 9-4. The DHCP relay sits on the same LAN as the client. It listens for DHCP 
requests and then takes the broadcast packet and issues a unicast packet to the net- 
work DHCP server. Unicast means that the packet is issued a fixed destination and 
therefore is no longer a broadcast packet. The DHCP relay puts its LAN address in 
the DHCP field so the DHCP server knows the subnet the request is coming from and 
can properly assign an IP address. The DHCP server retrieves an available IP address 
for the subnet and sends the address to the DHCP relay, which forwards it to the 
client. 


LAN Outside 


Client 





FIGURE 9-4 An example requiring the use of a DHCP relay. 


Cisco routers have a DHCP relay built into their operating system. The router 
command to enable the DHCP relay is Router(config-if)# ip helper [ip address of the 
DHCP server]. Notice that this command is issued from the interface that connects 
to the LAN. In fact, the IP address for the interface is typically the gateway address 
for the LAN. 

DHCP is a UDP protocol and uses port number 68 for the BOOTP-client and 
port 67 for the BOOTP-server. (BOOTP and DHCP use the same port numbers.) The 
BOOTP-client is the user requesting the DHCP service. The BOOTP-server is the 
DHCP server. The following discussion describes how these services are used in a 
DHCP request. The DHCP proxy on the router listens for the packets that are going 
to DHCP or BOOTP port numbers. 


The DHCP Data Packets 


The following is a discussion on the TCP packets transferred during a DHCP request. 
The network setup is the same as shown in Figure 9-4. The data traffic shown in this 
example will contain only the data packets seen by the client computer. The Finisar 
Surveyor Demo software was used to capture the data packets. A portion of the cap- 
tured data packets is provided in Figure 9-5. Packet 10 is a DHCP request with a 
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message type discover (MT Discover). This is also called the DHCP Discover MT Discover 

packet. The destination for the packet is a broadcast. The message source has a MAC Message type discover, a 
address of Dell 09B956, and the IP address is 0.0.0.0. The IP address is shown in the DHCP Discover packet 
middle panel, and the 0.0.0.0 indicates that an IP address has not been assigned to the 

computer. The source and destination ports are shown in the third panel in Figure 9- 

5. The source port is 68, which is for the Bootstrap Protocol Client (the computer re- 

questing the IP address). The destination port is 67, the Bootstrap Protocol Server (the 

DHCP server). 
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FIGURE 9-5 The captured DHCP packets. 
P P MT Offer 


Message type offer, a DHCP 


Offer packet 
Packet 13 is a reply from the DHCP server, an offer of the IP address to the 


client. This is called the DHCP Offer packet (MT Offer). This packet contains the MT Request 

domain name, the domain name server, the default gateway, other network informa- Message type request, a 
tion the client may need to connect to the network. Packet 14 has a message type of DHCP Request packet 
MT Request. This packet is sent from the client back to the server that has been se- MT ACK 

lected to provide the DHCP service. (Note: It is possible for a campus LAN to have y essage type 

more than one DHCP server answering the DHCP request.) The packet is sent acknowledgement, a DHCP 
through the DHCP relay to the DHCP server. This means that the client is accepting ACK packet 

the IP address offer. Packet 15 is a message type of ACK (MT ACK). The DHCP 

server is acknowledging the client’s acceptance of the IP address from the DHCP DNS 

server. The client computer now has an IP address assigned to it. Domain name service 


Forward Domain Name 


9-4 NETWORK SERVICES—DNS sek 


Translation of a name to an 


IP address 
This section examines the DNS services that are typically available in a campus net- 


work. DNS is the domain name service. DNS translates a human readable name toan Reverse Domain Name 
IP address or an IP address to a domain name. The translation of a name to an IPad- Service 

dress is called forward domain name service, and translation of an IP address toa Translation of an IP address 
domain name is called reverse domain name service. to a name 
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The domain name service is a tree hierarchy. It starts with the top level domains 
and then extends to subdomains. Examples of top level domains (TLD) are as 
follows: 

.com .net edu .mil info .biz .tv 


org .gov us .ca 


Country domains are usually defined by two letters, such as .us (United 
States) and .ca (Canada). The primary domain server for that domain has to exist in 
the same country; for example, the .us primary domain server is located in the United 
States. Figure 9-6 shows the top level domains and their relationship to the subdo- 
mains and root servers. 






Root Servers 


Top level com mil) edu net .org gov 
domains T eA info biz tv 
(TLD) 


Subdomains 


FIGURE 9-6 The domain name service tree hierarchy. 


The root servers use well-known IP addresses that have been programmed into 
DNS servers. When the DNS is installed on a server, the root server’s IP addresses 
are automatically configured in the DNS. The campus DNS will query the root 
servers to try to find name servers of known domains. 

For example, if network-A wants to know the IP address for the www server at 
network-B.edu, DNS queries one of the root servers and it returns the IP address for 
the .edu domain. Then the network-A DNS queries the .edu domain for the IP address 
of the network-B DNS. The network-A DNS then queries the network-B DNS to ob- 
tain the IP address for www.network-B.edu. There are many steps for obtaining the 
IP address via DNS. However, the DNS server keeps a cache of recent queries so this 
multiple-step process of obtaining an IP address does not have to be repeated unnec- 
essarily. The www entry, called the A record, is the name for an IP address. The A 
record is used by a DNS server at the parent company for network-B to convert the 
name www.network-B.edu to an IP address. 

The top level domain for network-B.edu is .edu, and the subdomain is network- 
B.edu. At the top level of the .edu domain, and all domains, are the root servers, as 
shown in Figure 9-6. The .edu domain has an NS record, basically a record that 
points to a name server. They will have an NS record for network-A that points to the 
IP address of the network-A domain name server and the secondary DNS server’s IP 
address and its DNS names. 

The root servers have information only about the next level in the tree. Root 
servers know only about the top level domains (for example, .com, .gov, .mil, etc.). 
They will not know anything about www.network-B.edu. They only know the .edu 
domain server’s IP address. 
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a RAN 


Campus DNS 


The first step for providing DNS for a campus network is to obtain a domain name. 
This requires that the user seeking the domain name go to www.internic.net. Internic 
has a list of name registrars where a domain can be purchased. Select a company that 
registers domain names. When you get on the registrar’s website you will be able to 
input a domain name. The registrar will check to see if the domain name is available. 
If the domain name is available, you will be prompted to complete the application for 
the domain name and put in the DNS servers that are to be used to host the domain. 
The DNS servers will be assigned an IP address and names. When the network’s DNS 
servers are placed online, the root servers will point to the network’s DNS servers. 
Administering the Local DNS Server—A Campus Network Example The 
primary records are the A records of a campus network. These contain the host name 
and IP addresses for the computers. For example, network-B.edu has an assigned IP 
address of 172.16.12.1. When a host pings www.network-B.edu, the host computer 
first checks its DNS cache; assuming the DNS cache is empty, the host then sends a 
DNS request to the campus DNS server. Typically the host will know the IP addresses 
of the primary and secondary DNS server through either static input or dynamic as- 
signment. The request is sent to the primary DNS server requesting the IP address for 
www.network-B.edu. The primary DNS server is the authority for network-B.edu and 
knows the IP address of the hosts in the network. The primary DNS server returns the 
IP address of www.network-B.edu, and then the ICMP process associated with a ping 
is started. 

One might ask, “How does a PC in the campus network become part of the 

campus domain?” Specifically, how is an A record entered into the campus domain? 
Recall that the A record provides a host to IP address translation. Adding the PC to 
the campus domain is done either manually or dynamically. 
The Steps for Manually Adding a Client to the Campus Network The steps 
for manually updating the DNS A records are graphically shown in Figure 9-7 and 
are listed as follows: A client PC updates the A record when an IP address is requested 
for a computer. The user obtains the PC name and the PC’s MAC address. This in- 
formation is sent to the network operation center (NOC). NOC issues an IP address 
to the client, updates the NOC database of clients on the network, and enters a new A 
record into the primary DNS. The entry is only made on the primary DNS. The entry 
will be later duplicated on the secondary DNS. 


STATIC 
Database 
Request §3=——— NOC 
pc-name IP Address 
MAC address ~ DNS 


FIGURE 9-7 Manually updating the A record. 


The Steps for Dynamically Adding a Client to the Campus Network Anew 
A record can be entered dynamically when the client computer obtains an IP address 
through DHCP registration. This is graphically depicted in Figure 9-8. The DHCP 
server will issue an IP address to the client and at the same time send an updated A 
record to the network’s primary DNS. Once again, the client name and the IP and 
MAC addresses are stored in the A record. 
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Why obtain the MAC address when entering the information into DNS? This 
record is used to keep track of all the machines operating on the network. The MAC 
address is a unique identifier for each machine. The MAC address is also used by 
BOOTP, which is a predecessor to DHCP. This is where a MAC address 1s specifi- 
cally assigned to one IP address in the network. 


Reverse DNS Reverse DNS returns a hostname for an IP address. This is used for security 
Returns a hostname for an purposes to verify that your domain is allowed to connect to a service. For example, 
IP address pe-salsal-1 (10.10.20.1) connects to an FTP server that only allows machines in the 


salsa domain to make the connection. When the connection is made, the FTP server 
knows only the IP address of the machine making the connection (10.10.20.1). The 
server will use the IP address to request the name assigned to that IP. A connection is 
made to the salsa domain server, and the salsa DNS server returns pc-salsal-1 as the 
machine assigned to 10.10.20.1. The FTP server recognizes this is a salsa domain ma- 
chine and authorizes the connection. 


DHCPreg 





Client mao DNS 
Server 


FIGURE 9-8 Dynamic updating of the A record using DHCP. 


9-5 NETWORK MANAGEMENT 


A campus network of moderate size has a tremendous number of data packets enter- 
ing and leaving. The number of routers, switches, hubs, servers, and host computers 
can become staggering. Proper network management requires that all network re- 
sources be managed. This requires that proper management tools be in place. 


SNMP A fundamental network management tool is SNMP, the Simple Network Man- 
Simple Network Management agement Protocol. SNMP, developed in 1988, is widely supported in most modern 
Protocol network hardware. SNMP is a connectionless protocol using the UDP (User Data- 
gram Protocol) for the transmission of data to and from UDP port 161. 
Management SNMP uses a management information base (MIB), which is a collection of 
Information Base (MIB) standard objects that are used to obtain configuration parameters and performance 
A collection of standard data on a networking device such as a router. For example, the MIB (ifDescr) returns 
objects that are used to a description of the router’s interfaces. An example is shown in Figure 9-9. An SNMP 
obtain configuration software tool was used to collect the interface description information. The IP address 


parameters and performance of the router is 10.10.10.1, and a get request ifDescr was sent to port 161, the UDP 
Pata Gia MENOUN, EEC port for SNMP. The descriptions of the interfaces were returned as shown. 
Obtaining the SNMP data requires that SNMP be configured on the router. The 
following discussion demonstrates how to configure SNMP on a Cisco router. 
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FIGURE 9-9 An example of using an SNMP software management tool to obtain 
descriptions of a router's interfaces using the MIB (ifDescr). 





Configuring SNMP 


The first step for configuring SNMP on a Cisco router is to enter the router’s config- 
uration mode using the conf t command: 


RouterB#conf t 
Enter configuration commands, one per line. End with CNTL/Z. 


From the router’s (config)# prompt enter the command snmp community 
[community string] [permissions]. The community string can be any word. The per- 
missions field is used to establish if the user can read only (ro), write only (wo), or 
both (rw). The options for configuring SNMP on the router are shown here: 


RouterB(config)#snmp community ? 
WORD SNMP community string 


The router was connected to the computer running the SNMP management 
software, as shown in Figure 9-10. The router’s configuration mode was entered, and 
the samp community public ro command was issued. The word public is used as the 
community string. The community string is the password used by the SNMP software 
to access SNMP (port 161) on the router. The ro sets the permission to read only. 


RouterB(config)#snmp community public ro 
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FIGURE 9-10 The setup for connecting the SNMP management software tool to the router. 
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In the next example, the community string password is set to makesecret, and 
the permission is set to read write (rw). Once again, the router’s (config)# mode is en- 
tered and the command snmp community makesecret rw is entered: 


RouterB(config)#snmp community makesecret rw 


The configuration for SNMP can be verified using the show run command 
from the router’s privileged mode prompt. A portion of the configuration file that lists 
the SNMP configuration for the router is shown here: 


RouterBésh run 


snmp-server community makesecret RW 


Figure 9-10 shows the setup of the configured router and the computer running 
the SNMP management software. The SNMP management software issues the MIB 
to the router at port 161, and the router returns the response. Figure 9-11 shows an- 
other example of using SNMP to obtain interface information about a router. The 
SNMP manager was configured with the host IP address of 10.10.10.1, a set value 
(port #) of 161 and the 10 character community string of makesecret shown as * * * 
KK ok kkk The MIB (ifspeed) was sent to the router and a status for each of the 
interfaces was provided. The data displayed shows the speed settings for the router’s 
interfaces. 


|Aladventnet Mibprowser eee =15) x! 


File Edit View Operations Help 


eae hme HERBY) S SWE AA? A 


~ sysUpTime Host fio.10.10.1 ¥| Community frresaseces 

~~ sysContact 

D sysName Set Value fet x] Write Community | 

® sysLocation Contexia,. | ConteviencinelD [| (<ité‘i‘éa 

- i sysSernices 

a- interfaces Object ID org.dod.internet.mgmt.mib-2.interfaces.ifTable.ifentry.ifSpeed 
~ i ifNumber 
= ifTable 
B- ifentry 

G iflndex 
-S ifDescr 
=- ifType 


Sent get request to 10.10.10.1: 161 
ifSpeed.1:-->10000000 
ifSpeed.2:-->10000000 

ifSpeed. 3:-->1544000 

ifSpeed. 4: -->1544000 


E 3 
~- ifAdminStatus = 
| piparien Syntax [Gauge Status [mandatory 
= ifnOctets Access [read-only Reference | E 


Ø ifinUcastPkts Index 


B- pi „q| ObjectiD [1.3.6.1.2.1.2.21.5 


An estimate of the interface's current bandwidt + 


pvr in handrri deh aw Faw thana hava na marsen 


Descripti.. | in bits per second. For interfaces which do not- 
| 





FIGURE 9-11 Using an SNMP software management tool to obtain interface speed settings. 


Another important application of SNMP is for obtaining traffic data statistics. 
An example of this is shown in Figure 9-12. The SNMP management program issued 
the MIB GfOutOctets), which returns the number of octets of data that have left the 
router. (The router has a counter that keeps track.) The first result shows ifOutOctets 
7002270. The next result display shows that the ifOutOctets returns a value of 
7002361. 
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jifOutOctets.1:-->7002603 


sent get request to 10.10.10.1: 161 
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Global View L 


FIGURE 9-12 An example of using SNMP to collect data traffic statistics. 


The SNMP management program collecting the statistics keeps track of the 
time interval between measurements and the number of octets that have passed. This 
information can be used to calculate the average traffic flow by hour, day, week, or 
month, depending on the information needed. An example of collecting traffic route 
statistics is provided in section 9-7. A final note about the router’s counter: the 
counter does not reset unless the router is rebooted. 


Power over Ethernet (PoE) 


One of the challenges the network administrator faces as the campus network grows Power over Ethernet 
is making sure that electrical power is available for the networking devices (for (PoE) 

example, switches, wireless access points, and IP phones). It is not always practical Technology developed to 
or affordable to run electrical power every place a networking device is needed. This SUPPly power over the 
challenge is met with Power over Ethernet (PoE). The Power over Ethernet stan- network cabling (CATS or 


dard (IEEE 802.3af) was approved in 2003 for networks running 1OBASE-T, ALLI 
100BASE-T, and 1000BASE-T technologies. This provided a standardized technol- 
ogy that can be used to supply power over existing CATS or better network cabling 
(CATS or better) to the networking devices. 
The benefits of PoE include the following: 

e [tis not necessary to run external power to all networking devices. 

e You can run power and data over one cable. 

e Monitoring of power management via SNMP. 

e Networking devices can be moved easily. 
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PD 
Powered Device 


PSE 
Power Sourcing Equipment 


Endpoint PSE 

Example is the source port 
on an Ethernet switch that 
connects to the PD 


Midspan (mid-point) 
PSE 

Used to provide power to a 
PD when a powered Ethernet 
port is not available 


Resistive Power 
Discovery 

Looking for devices that 
Support PoE and have a 
25kQ resistor connected 
between the transmit and 
receive pairs 


The power provided by PoE as defined by IEEE 802.3af is as follows: 


15.4 watts per port to Ethernet devices 
48 volt system 


There are two pieces of networking hardware defined in PoE. These are the 
Powered Device (PD) and the Power Sourcing Equipment (PSE). There are three 
main functions provided by the PSE: 


e Capability of detecting a PD 
e Supplying power to the PD 
e Power supply monitoring 


There are two types of power sourcing equipment (PSE). These are the end- 
point PSE and the midspan (mid-point) PSE. An example of an endpoint PSE is the 
source port on an Ethernet switch that connects, via a cable, to a PD. The power to 
the PD can be delivered in two ways, over the active data pairs (for example, 1—2, 3—6) 
or via pairs 4-5, 7—8. This is shown on Figure 9-13 (a and b). Both types of power 
delivery can be used for 10BASE-T, 100 BASE-T, and 1000 BASE-T. The most com- 
mon way of power delivery is over pairs 1—2/3—6 as shown in Figure 9-13 (a). 

A midspan or mid-point PSE is used to provide power to a PD when a powered 
Ethernet port is not available. This setup requires the use of a power injector and typ- 
ically uses pairs 4—5/7—8, and this does not support 1000 BASE-T connections. 


Switch PSE Switch PSE 








Access 
Point 


Access 
Point 


FIGURE 9-13 The two ways to deliver power to the PD: (a) pairs 1-2/3-6 and (b) 
4-5/7-8 


The PD is the actual device receiving power such as wireless access points and 
an IP phone. There are four classes of PD devices: 


Class O0 (.44 to 12.95 watts) 
Class 1 (.44 to 3.84 watts) 
Class 2 (3.84 to 6.49 watts) 
Class 3 (6.49 to 12.95 watts) 


PD devices are “discovered” by the PSE by sending discovery signals on active 
and inactive Ethernet ports. The discovery process (called Resistive Power Discov- 
ery) is basically looking for devices that support PoE. Valid PDs will have a 25kQ re- 
sistor connected between the transmit and receive pairs. Before full power is 
delivered to the PD, two low-voltage “discovery” signals are sent out to verify that a 
compatible PoE device is attached. The second of the two signals is a slightly higher 
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voltage than the first but neither is large enough to damage an incompatible device. 
If the PSE detects a compatible PD, then the full 48 Volts is applied to all ports that 
have compatible PDs connected. 
A new version of Power over Ethernet, called PoE Plus, based on the IEEE PoE Plus 
802.3at standard is now available. PoE Plus provides the following features: A new version of PoE based 


on IEEE 802.3at 
e supports both 802.3af (PoE) and 802.3at (PoE Plus) PDs 
e support for midspan PSEs for 10000 BASE-T 
e supports a minimum of 30 watts of power for the PD 
e support for LOGBASE-T 
e will operate with CATS and higher cabling 


There are a limited number of problems with PoE as long as the devices sup- 
port IEEE 802.3af. In cases where a vendor proprietary PoE equipment is being used, 
the PSEs and PDs must be compatible. Also the Network Administrator must be 
aware of how many PDs are connected to the PSE and that the total power require- 
ments for the PDs does not exceed the PSEs limit. For example, a network could have 
10 access point and 25 IP phone all requiring a PoE connection. The total number of 
devices requiring power can exceed the power output for a PSE and possibly damag- 
ing the device. 


9-6 SwitcH/VLAN CONFIGURATION 


The networking switch was introduced in Chapter 4. The basic functions and opera- 

tion of a managed switch were introduced, as were the various modes of operations. 

This section examines the function of using a switch in a VLAN within the campus 

network. The terminology and steps for implementing VLANs will be first presented. 

The second part examines basic Cisco switch configuration and provides an intro- 

duction to the commands needed for configuring the VLAN. The third part of section 

9-6 demonstrates the commands needed to set-up a static VLAN. The section con- 

cludes with a discussion on the Spanning-Tree Protocol (STP). 

VLAN (Virtual LAN) 

Virtual LAN (VLAN) A group of host computers 


l and servers that are 
A switch can be configured as a VLAN (Virtual LAN) where a group of host com- configured as if they are in 


puters and servers are configured as if they are in the same LAN even if they reside the same LAN even if they 

across routers in separate LANs. The advantage of using VLANs is the network ad- reside across routers in 

ministrator can group computers and servers in the same VLAN based on the organi- separate LANs 

zational group (e.g. Sales, Engineering) even if they are not on the same physical Port-based VLAN 

segment or even the same building. Hoe computers connected 
There are three types of VLANs; port-based, tag-based, and protocol-based. to specific ports on a switch 

The port-based VLAN is one where the host computers connected to specific ports „re assigned to a specific 

on a switch are assigned to a specific VLAN. For example, assume the computers VLAN 

connected to switch ports 2, 3, and 4 are assigned to the Sales VLAN 2 while the com- 

puters connected to switch ports 6, 7, and 8 are assigned to the Engineering VLAN 3 Tagged-based VLAN 

as shown in Figure 9-14. The switch will be configured as a port-based VLAN so that Used VLAN ID based on 

the groups of ports [2,3,4] are assigned to the sales VLAN while ports [6,7,8] belong 892-10 

to the Engineering VLAN. The devices assigned to the same VLAN will share broad- Protocol-Based VLAN 

casts for that LAN however, computers that are connected to ports not assigned to the Connection to ports is based 

VLAN will not share the broadcasts. For example, the computers in VLAN 2 (Sales) on the protocol being used 
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share the same broadcast domain and computers in VLAN 3 (Engineering) share a 
different broadcast domain. 





CCE fl 
VLAN 2 VLAN 3 
Ports 2,3,4 Ports 6,7,8 


FIGURE 9-14 An example of the grouping for port-based VLANs. 


In tag-based VLANs, a tag is added to the Ethernet frames. This tag contains 
the VLAN ID that is used to identify that a frame belongs to a specific VLAN. The 
addition of the VLAN ID is based on the 802.1Q specification. An advantage of an 
802.1Q VLAN is it helps to contain broadcast and multicast data traffic that helps to 
minimize data congestion and improve throughput. This specification also provides 
guidelines for a switch port to belong to more than one VLAN. Additionally, the tag- 
based VLANs can help provide better security by logically isolating and grouping 
users 

In a protocol-based VLANs, the data traffic is connected to specific ports based 
on the type of protocol being used. The packet is dropped when it enters the switch if 
the protocol doesn’t match any of the VLANs. For example, an IP network could be 
set up for the Engineering VLAN on ports 6,7,8 and an IPX network for the Sales 
VLAN on ports 2,3, and 4. The advantage of this is the data traffic for the two net- 
works is separated. 

There are two approaches for assigning VLAN membership: 


Static VLAN e Static VLAN: Basically a port-based VLAN. The assignments are created 
Basically a port-based VLAN when ports are assigned to a specific VLAN. 

i e Dynamic VLAN: Ports are assigned to a VLAN based on either the computer’s 
Dynamic VLAN . À 
Ports are assigned to a VLAN MAC address or the username of the client logged onto the computer. This 
bacedonaitherthe means that the system has been previously configured with the VLAN assign- 


compuuter’s MAC addrress or ments for the computer or the username. The advantage of this is the username 
the username of the client and/or the computer can move to a different location, but VLAN membership 
logged onto the computer will be retained. 


Switch Configuration 


This section examines the basics of configuring a Cisco switch. The commands for 
switch configuration are similar to that of a router. Configuring a switch requires that 
the privileged mode be entered on the switch. The privileged EXEC mode (also called 
the enable mode) allows full access for configuring the switch ports and establishing 
a VLAN. This section focuses on general configuration steps for the switch, examin- 
ing MAC address information and IP address configuration of the VLANs. 
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The privileged mode is entered using the command enable at the Switch> 
prompt as shown. The # sign after the switch name indicates you are in the privileged 
EXEC mode (Switch#). 

Switch> enable 


Password: 
Switch# 


Entry into the switch’s privileged mode is typically password-protected. The excep- 
tion to this is when a switch has not been configured and a password has not been as- 
signed to it. In this case, pressing Enter on the keyboard from the Switch> prompt 
will promote the user to the privilege mode (Switch#) without requesting a password. 

Use caution once you have entered the privileged mode in a switch. It is easy 
to make mistakes, and incorrectly entered switch configurations will adversely affect 
your network. This text comes with the Net-Challenge switch simulator on the com- 
panion CD-ROM to help you gain experience with switch configuration. In fact, most 
of the switch configuration commands presented in this section can be implemented 
in the switch simulator on the companion CD-ROM. 


Hostname 


The next commands examined require that the switch’s terminal configuration mode Configure Terminal 
be entered. To do this, enter the command configure terminal (abbreviated conf t) at (conf t) 


the switch# prompt to enter the switch’s configuration mode. Command to enter the 
swtch’s terminal 


switch#conf t : : 
configuration mode 


Enter configuration commands, one per line. End with CNTL/Z. 
switch(config)# 


switch#configure terminal 
Enter configuration commands, one per line. End with CNTL/Z. 
switch(config)# 


Note the change in the prompt to switch(config)#. This indicates that the switch 
is in terminal configuration mode. 

The first switch configuration option examined enables the user to assign a 
hostname to the switch. The generic name or the name of an unconfigured Cisco 
switch is switch, and the hostname command enables the user to change the name to 
specifically identify the switch. For example, valid hostname structures include 
switchA, switch-A, or switch_A, while switch A is not valid. Valid switch hostnames 
may not have any spaces. The word switch does not have to be used in the hostname. 

In the privileged mode (switch#) enter the command hostname [switch-name] 
<enter>. This sets the hostname for the switch to switch-name. The following exam- 
ple demonstrates how the switch’s hostname is changed to SwitchA. Notice the 
change with the switch’s name from the first to the second line after the hostname 
command is entered. 


Switch(config)# hostname SwitchaA 
SwitchA# 
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Enable Secret 


Switch (config) # Password protection for the privileged (enable) mode is configured by setting the en- 
The prompt for the switch’s able secret. The steps are as follows: Enter the switch’s configure terminal mode by 
terminal configuration mode entering configure terminal or conf t at the Switch# prompt. Enter the command 
enable secret [your-password] <enter>. An example is shown here: 
SwitchA# conf t 


SwitchA(config)# 
SwitchA(config)# enable secret my-secret 


This example sets the password for entering the switch’s privileged EXEC 
mode to my-secret. The password for entering the switch’s privileged mode must now 
be entered to gain access to the mode. 


Setting the Line Console Passwords 


Switch (config-line) # The switch has two line connections through which a user may gain access to the 
The prompt indicating you switch. The line connections available on a switch can be displayed using the line ? 
are in the switch’s line command at the Switch(config)# prompt. The available line connections typically are 
configuration mode as follows: 

console Primary terminal line (console port) 

vty Virtual terminal (for a telnet connection) 


The console (primary terminal line) is the console port, and vty is the virtual 
terminal used for telnet connections. The following steps demonstrate how to con- 
figure password protection for the console port and the virtual terminal. 

The console port configuration is as follows: Enter the command line console 
0 <enter>. Next enter the command login, press Enter, and then input the command 
password [my-secret2], where my-secret2 is the console port password. An example 
of using these commands follows. 

SwitchA(config)# line console 6 

SwitchA(config-line)# login 

SwitchA(config-line)# password my-secret2 

Note the change in the switch prompt to SwitchA(config-line)#, indicating you 
are in the switch’s line configuration mode. 

Password protection for the virtual terminal (line vty) is set from the switch’s 
configuration mode. The virtual terminal is the method for entering the switch via a 
Telnet connection. The command line vty 0 15 is first entered. This places the switch 
in the line configuration mode (config-line). The “0 15 “ indicates that sixteen virtual 
terminal connections can be simultaneously made: The sixteen virtual terminal con- 
nections are identified as 0, 1, 2,3,4.... Next enter login, press Enter, followed by 
entering the command password [my-secret3]. The entry my-secret3 is the password 
for the virtual terminal connection. 

SwitchA(config)# line vty @ 4 

SwitchA(config-line)# password my-secret3 

SwitchA(config-line)# login 

Layer 3 access to the switch is set by using the following command. Note that 
the IP address is being set for VLAN 1. The interface for the switch is also enabled 
at this same point using the no shutdown command as shown. 

SwitchA(config)# interface VLAN 1 


SwitchA(config-if)#ip address 172.16.32.2 255.255.255.0 
SwitchA(config-if) no shutdown 
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The default gateway for the switch can be set using the following command. 
The default gateway instructs the switch where to forward the data packet if there 
isn’t a specified route defined in the switch. 


SwitchA(config)# ip default-gateway 172.16.35.1 


The configuration settings entered on the VLAN | interface can be viewed by 
entering the following command: 


SwitchA#show interface VLAN 1 


The running configuration for the switch is viewed using the show running- 
config command as shown. The startup configuration is displayed using the show 
startup-config, and the running-configuration file is copied to NVRAM using the 
copy running-config startup-config command as shown. 


SwitchA#show running-configuration 
SwitchA#copy running-configuration start-up configuration 


These examples show that there is a lot of similarity between switch and router 
configuration at the command line interface. However, the major differences are ap- 
parent when configuring a VLAN. The next section demonstrates the steps for con- 
figuring a Static VLAN. 


Static VLAN Configuration 


This section demonstrates the steps for configuring a Static VLAN. In this example, 
the ports for VLAN 2 (Sales) and VLAN 3 (Engineering) will be defined. This re- 
quires that VLAN memberships be defined for the required ports. The steps and the 
commands will be demonstrated. 

The first step for configuring the VLAN is to establish a terminal connection to 
the switch using the Cisco console cable. The console connection is used to perform 
the initial configurations that are needed to use the Cisco Network Assistant software. 


1. Connect the Console cable to your workstation and switch. 

2. Open the HyperTerminal software on your workstation. 

3. Make a HyperTerminal connection to the switch. (Same steps as connecting to 
a router) 


Now that you have made a HyperTerminal connection to the switch, the 
switch’s initial prompt should appear as Switch>. 


1. At the initial prompt type enable or en. Once this is done the prompt should 
change to Switch#. This allows you to enter the privileged mode of the switch. 

2. Next type configure terminal or conf t. Once this is done the prompt should 
change to Switch(config)#. Doing this places you in the global configuration 
mode of the switch. 

3. Now type interface Vlan1 or int Vlan1. The prompt should now change to 
Switch(config-if)#. You are now able to make changes to Vlan1’s interface. 

4. Next enter ip address 192.168.1.1 255.255.255.0. This command changes the 
switches IP address to 192.168.1.1 

5. Type no shut. This is needed for Vlan1 to stay up and active. 


You have now set the IP address of the switch to 192.168.1.1. Notice that the 
subnet mask is set to 255.255.255.0 which places the switch in the 192.168.1.0 net- 
work. The IP address is set for Vlan1 because this is the default administrative VLAN 
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for the switch, and it can never be removed. The workstation should be connected to 
port 1 on the switch, and the computers IP address’s should be configured for 
192.168.1.2. This places the computer in the same network as that defined for the 
VLANI interface. At this point, use the ping command to verify network connectiv- 
ity from the computer to the switch. 

The next step is to use the show vlan command to verify what ports have de- 
fined for the switch. By default, all ports are assigned to VLAN 1. An example using 
the show vlan command is provided next. 


Switch# show vlan 


VLAN Name Status Ports 


1 default active FaQ/1, Fa@/2, Fa0/3, FaQ0/4 
FaQ/5, FaQ@/6, Fa0/7, FaQd/8 
FaQ/9, FaQ/10 


This shows that all of the FastEthernet interfaces are currently assigned to VLAN 1. 
In the next step, two additional VLANs will be created for both the Sales and Engi- 
neering. This is accomplished modifying the VLAN database as shown in the next 
Steps. 


SwitchA#vlan database 


Switch(vlan)#vlan 2 name Sales 
VLAN 2 modified: 
Name: Sales 
Switch(vlan)#vlan 3 name Engineering 
VLAN 3 modified: 
Name: Engineering 


The next step is used to verify that the new VLANs have been created. 


Switch(vlan)# exit 
Switch#show vlan 


VLAN Name Status Ports 


1 default active FaQ/1, Fa@/2, Fa0/3, FaQd/4 
FaQ/5, FaQ@/6, Fa0/7, Fad/8 
FaQ/9, FaQ/10 

2 Sales active 

3 Engineering active 


In the next steps, ports will be assigned to the newly created VLANSs. This re- 
quires that the configuration mode be entered and each FastEthernet interface (port) 
must be assigned to the proper VLAN. An example is presented for FastEthernet in- 
terface 0/2 being assigned to VLAN 2. 

Switch#conf t 

Enter configuration commands, one per line. End with CNTL/Z. 

Switch(config)#int fa 0/2 

Switch(config-if)#switchport mode access 


( 
Switch(config-if)#switchport access vlan 2 
Switch(config-if)#end 


The next step is used to verify that FastEthernet 0/2 has been assigned to the 
Sales VLAN (VLAN2). This can be verified using the show vlan brief command as 
shown. This command only displays the interfaces assigned to each VLAN. 
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Switch#sh vlan 


VLAN Name Status Ports 

1 default active FaQ/1, Fa@/3, Fa0/4, FaQ@/5 
FaQ/6, Fa@/7, Fa0/8, FaQ/9 
FaQ@/10 

2 Sales active FaQ/2 


The next steps are to assigned ports 3 and 4 to the Sales VLAN (VLAN 2) and 
ports 6,7,8 to Engineering (VLAN 3). Once this is completed, the port assignments 
can be verified using the show VLAN command as shown. 


Switch#show vlan 


VLAN Name Status Ports 

1 default active  Fa0/1, Fa0/5, Fa0/9, Fa0/10 
2 Sales active FaQ/2, Fa@/3, Fad/4 

3 Engineering active Fa0/6, Fa@/7, Fa0/8 


You can look specifically at the assignments for only one of the VLANs by en- 
tering the command show vlan name <vlan-name> where vlan-name is the name as- 
signed to the VLAN. Please note that the name is case-sensitive. You can also use the 
number of the VLAN instead using the command sh vlan id <vlan#>. Examples of 
both are presented. 


Switch#sh vlan name Engineering 


VLAN Name Status Ports 


3 Engineering active Fa0/6, Fa@/7, Fad/8 
Switch#show vlan id 3 


VLAN Name Status Ports 


3 Engineering active FaQ/6, Fa@/7, Fad/8 


The overall configuration of the switch can be viewed using the show running- 
config (sh run) command as shown. Only a part of the configuration is displayed. 


Switch#sh run - - 
Building configuration... 


Current configuration : 1411 bytes 
! 

version 12.1 

no service pad 

service timestamps debug uptime 
service timestamps log uptime 

no service password-encryption 

! 

hostname Switch 

! 

ip subnet-zero 

! 

spanning-tree mode pvst 

no spanning-tree optimize bpdu transmission 
spanning-tree extend system-id 

| 


interface FastEthernetQ/1 
la 


Section 9-6 œe Switch/VLAN Configuration 


S ORIN 40 


375 


interface FastEthernet0/2 
Switchport access vlan 2 
switchport mode access 


interface FastEthernet@/5 
l 


interface FastEthernet0/6 
switchport access vlan 3 


switchport mode access 
l 


interface FastEthernet0/9 
l 


interface FastEthernetQ/10 

l 

! 

interface Vlani 

ip address 192.168.1.1 255.255.255.0 


no ip route-cache 
| 


ip http server 
| 


Line con 0 
line vty @ 15 
login 

end 

The running-configuration for the switch shows that the FastEthernet interfaces 
have been assigned to the proper VLANs. Additionally this shows that an IP address 
has been assigned to the default interface VLAN 1. 

This portion of the text has demonstrated the steps for creating a static VLAN. 
Both Sales and Engineering VLANs were created, and specific ports on the switch 
were assigned to the respective VLANs. Unassigned ports remained as part of the de- 
fault VLAN 1. 


Networking Challenge—Static VLAN Configuration 


Use the simulator software included with the text’s Companion CD-ROM to demon- 
strate that you can perform basic switch and static VLAN configuration. Place the 
CDROM in your computer’s drive. Open the Net-Challenge folder, and click 
NetChallenge.exe. Once the software is running, click the Select Challenge button. 
This opens a Select Challenge drop-down menu. Select Chapter 9—Static VLAN 
Configuration. This opens a check box that can be used to verify that you have com- 
pleted all the tasks. 


Enter the privileged EXEC mode on the switch. 

Enter the switch’s configuration mode, Router(config). 

Set the hostname of the switch to switch-A. 

Configure the IP address for VLAN 1 interface with the following: 

IP address: 10.10.20.250 

Subnet mask: 255.255.255.0 

Enable the VLAN 1 interface. 

Use the command to display the current VLAN settings for the switch. 
7. Issue the command that lets you modify the VLAN database. 


oe ae 


a 
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8. Create a VLAN called Sales 
9. Verify that anew VLAN has been created. 
10. Issue the command to enter the fa0/2 interface configuration mode. 
11. Enter the sequence of commands that are used to assign interface fa0/2 and 
fa0/3 to the Sales VLAN. 
12. Enter the command that enables you to display the interface assigned to each 
VLAN. 
13. Enter the command that enables you to view specifically the assignments for 
the Sales VLAN. 
14. Issue the command that allows you to view the switch’s running-configuration. 


Spanning-Tree Protocol 


This last section on switches examines the Spanning-Tree Protocol (STP). STP is a 
link management protocol that prevents looping and also controls data flow over pos- 
sible redundant data paths. Looping is bad for Ethernet networks because duplicate 
packets can be sent over redundant paths. The switches should only send the packets 
over one path. The Spanning Tree Protocol is used to ensure only one data path is se- 
lected. The Spanning Tree Protocol also forces one of the redundant data paths into a 
stand-by mode by placing the path in a blocked state. 

Switches that are participating in the Spanning-Tree Protocol exchange infor- 
mation with other switches in the form of bridge protocol data units (BPDUs). 
Switches use the BPDUs for the following: 


e Election of a root switch for the spanning-tree network topology. 

e Removing redundant data paths. 

e The shortest distance to a root switch is calculated. 

e A port from each switch is selected as the best path to the root switch. 
e Ports that are part of the Spanning-Tree Protocol are selected. 


Switches assume they are the root switch until the BPDUs are exchanged and 
a root switch is elected. The root switch elected is the switch with the lowest MAC 
address. Part of the BPDU packet is shown. In this case a switch with the MAC ad- 
dress 0030194A6940 is issuing that data packet as start of the bidding process to see 
which switch will be elected as the “root” switch. 


BPDU Config BID=0030194A6940 PID=0x801B 


The “Config” indicates this is a Configuration BPDU and is used by the 
switches to elect the “root” switch. There are two other types of packets that can come 
from the switch. These are the Topology Change Notification (TCN), which is used 
to indicate that a there has been a change in the switch network topology. The third 
is the Topology Change Notification Acknowledgement (TCA). This is an ac- 
knowledgement from another switch that the TCN has been received. 

An example of the contents of a BPDU is provided in Figure 9-15. This is show- 
ing that the Root ID—MAC address is 0030194A6940. The BPDUs are exchanged 
at regular intervals and are used to keep the switches notified of any changes in the 
network topology. The default notification interval is 2 seconds and is called the the 
“Hello Time,’ as shown in Figure 9-15. 
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Spanning-Tree Protocol 
A link management protocol 
that prevents looping and 
also controls data flow over 
possible redundant data 
paths 


Bridge Protocol Data 
Unit (BPDU) 

Used by switches to share 
information with other 
switches that are 
participating in the 
Spanning-Tree Protocol. 


Configuration BPDU 
Used by switches to elect 
the “root” switch 


Topology Change 
Notification (TCN) 
Used to indicate that there 
has been a change in the 
switch 


Topology Change 
Notification 
Acknowledgement (TCA) 
An acknowledgement from 
another switch that the TCN 
has been received. 
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IEEE 802.10 —- Bridge 
Management Protocol 
(IEEE 802.1D) 
Protocol ID oxoooo (Bridge PDU) 














Bridge Protocol Data 

Unit C(BPDU) 

Version 

Type (configuration) 
Flags 




















Not Topology Change Acknowledgment 
Not Topology Change 
.000 ooo. Not Used (MBZ) 

Root ID - Settable 32768 
Priority 
Root ID - MAC Address 0030194A6940 [No Vendor Name. - 4A6940] [0030194A6940] 
Root Path Cost 0 
Bridge ID - Settable 32768 
Priority 
Bridge ID - MAC Address 0030194A6940 [No Vendor Name. - 4A6940] [0030194A6940] 
Port Identifier 0x801B 
Message Age 0.000000 secs 
Max Age 20.000000 secs 
Hello Time 2.000000 secs 
Forward Delay 15.000000 secs 





FIGURE 9-15 An example of a BPDU—Bridge Protocol Data Unit packet information 


The switch will not begin to forward data packets when a networking device is 
connected to a port. Instead, during this delay, the switch will first begin to process 
the BPDUs to determine the topology of the switch network. This is called the for- 
ward delay, which is listed in Figure 9-15. This is showing that the forward delay is 
15 seconds, which is the default value set by the root switch. During the delay period, 
the switch is going through the listening and learning states. 

There are five Spanning-Tree Protocol states: 


e Blocking State: In this state, the switch is not sending data out of the ports. 
However, the switch is receiving and monitoring the BPDUs. This state is used 
to prevent any possible switching loops. 

e Listening State: BPDUs are being processed. 

e Learning State: The switch is learning source MAC addresses from the re- 
ceived data packets and will add the addresses to the MAC address table. 

e Forwarding State: The switch is now sending and receiving data packets. The 
BPDUs are still to be monitored for any possible change in the switch network. 

e Disabled: This is a setting available for the network administrator to manually 
disable the port. This is not part of the Spanning-Tree Protocol but rather a func- 
tion available on the switch. 


9-7 ANALYZING CAMPUS NETWORK DATA 
TRAFFIC 


The focus of this chapter has been on the issues of configuring and managing the cam- 
pus network. A key issue in network management is network monitoring and the col- 
lection of utilization and error statistics. 

Section 9-5 introduced the SNMP protocol for use in network management. An 
example was presented that shows how to obtain the number of octets leaving a router. 
This type of information can be used in a campus network to monitor the flow of data 
for many points in the network. Statistics can be obtained for hourly, daily, weekly, 
and monthly data traffic. This section discusses plots of network router utilization ob- 
tained via the router’s SNMP port. 
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a ARC 


Figure 9-16 is a plot of a router’s hourly data traffic. The plot shows the aver- 
age number of bits coming into the router and the average number of bits out. The 
network administrator should become familiar with the typical hourly data traffic pat- 
tern for their network. Notice the decrease in data traffic in the early morning and the 
dramatic increase in data traffic around 12:00. The traffic clearly shows some type of 
disturbance around 12:00. The plot is showing that the bit rate significantly increases 
for a few minutes. This is not necessarily a problem, but it is something that a net- 
work administrator will want to watch. 


bits per second 





» r A 
00: 00 06; 00 12:00 18; 00 00; 00 06; 00 12: 00 


G Average bits in W Average bits out 





FIGURE 9-16 The hourly plot of a router's data traffic. 


In this case, the network administrator looked at the daily log of network ac- 
tivity for the same router. This plot is shown in Figure 9-17. The cycle of the data traf- 
fic from morning to night is as expected, heavy data traffic about noon and very low 
data traffic in the mornings. An interesting note is the noon data traffic spikes on the 
first Wednesday and then repeats the following Wednesday. Whatever is causing the 
change in traffic appears to happen on Wednesdays. If this sudden change in data traf- 
fic turned out to be something of concern, a protocol analyzer could be set up to cap- 
ture the data traffic on Wednesdays around noon so that the traffic pattern could be 
explained. 
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FIGURE 9-17 The daily plot of a router's data traffic. 
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Sometimes the graph of the network traffic over a longer period of time 1s 
needed. Figure 9-18 shows the data traffic through the router over a six-week period. 
The traffic shows some consistency except for a change from week 11 to week 12. 
Most likely this can be explained by examining the network trouble reports and main- 
tenance logs to see if this router was briefly out of service. 
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FIGURE 9-18 The weekly plot of a router's data traffic. 


Justifying the expansion of a network’s capability (for example, higher data rate 
or better core or distribution service) requires showing the manager data traffic sta- 
tistics. Figure 9-19 is a plot of the router’s monthly data traffic. The summer shows a 
significant decrease in data traffic. The plot also shows that the network was down 
once in the June—July period and again in January. The manager wants to know if 
there is justification to increase the data rate of the router to 1 gigabit (1 GB). (The 
router’s current data rate is 100 Mbps.) Is there justification to upgrade the router to 
1 GB? Probably not, at least not immediately. The maximum measured average data 
rate is about 16 Mbps. The router’s 100 Mbps data rate does not seem to be causing 
any traffic congestion problems. 
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FIGURE 9-19 The monthly plot of a router's data traffic. 


This section has shown how keeping logs of data traffic can be used to spot 
potential network problems and to help plan for possible future expansion of the 
network. 
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SUMMARY 


The fundamentals of configuring and managing a campus network have been pre- 
sented in this chapter. This has been a brief overview of the campus network, and you 
should understand that each of the topics presented in this chapter could easily be ex- 
panded to fill an entire textbook(s). What you should understand from this reading is 
that configuring and managing a campus network is a major task. It is critical for the 
networking group to have people who truly understand the many aspects of config- 
uring and managing the campus network. Configuring and managing a campus DNS 
and DHCP service is a challenging task. Planning the integration of the equipment in 
the layers for the campus network is also a challenging task. Monitoring the network 
activity requires additional networking staff resources. You should appreciate the fact 
that configuring and managing a campus type network requires the expertise of many 
people with many different networking capabilities as well as understand the following: 


e The importance and function of the three layers of a campus network 

e How DHCP and DNS services work 

e The importance of incorporating network services such as DHCP and DNS into 
a campus network 

e How SNMP management tools can be used to monitor the data traffic and per- 
formance within a campus network 


QUESTIONS AND PROBLEMS 


Section 9-2 


1. What networking equipment is usually found in the core of a campus network’? 

2. How are route policies applied in the core? 

3. What is the advantage of using a layer 3 switch in the core of the campus 
network? 

4. Can a layer 2 switch be used in the core of the campus network? Why or why 
not? 

5. What is the function of the distribution layer in a campus network? 

6. Can routing policies be implemented in the distribution layer? Why or why not? 

7. What is the purpose of the access layer? 

8. The campus network servers are typically located in what layer? 

9 

0 





. Why are routers typically not interconnected at the distribution layer? 

. What is the name for the part of the campus network that carries the bulk of the 
routed data traffic? 

11. List three criteria for selecting the network media. Which is the final decision 

factor? 

12. Which media is the best choice in a campus network? 

13. Define load balancing in terms of data traffic flow in a computer network. 

14. Define per-destination load balancing. 

15. Define per-packet load balancing. 
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16. Referring to Figure 9-1 from the beginning of the chapter, discuss how data 
flows from a computer in LAN B to a computer in LAN D. Assume that the 
routing protocol is OSPF, the cost of RouterB’s ge-0/0/0 interface has been set 
to 10, and the cost of RouterB’s ge-0/2/0 interface has been set to 20. 


Section 9-3 


17. With regards to campus DHCP service, the IP address assignment is based on 
what? 

18. What is the subnet mask for creating the four subnets illustrated in Figure 9-2 
earlier in the chapter? 

19. How are BOOTP and DHCP related? 

20. Define lease time. 

21. What networking function is required if the DHCP server is not on the same 
LAN? Why is this networking function required? 

22. What command enables a DHCP relay on a Cisco router? 

23. Why is packet 14 in the captured DHCP packets shown in Figure 9-5 (shown 
earlier in the chapter) a broadcast? 

24. What are the port numbers for the DHCP protocol? 


Section 9-4 


25. List 11 top level domains. 

26. What is the purpose of a root server in DNS? 

27. A new network wants to obtain a domain name. The first step is what? 

28. The hostname and IP address for a computer is stored in what for a campus 
DNS service? 

29. How is it possible for the command ping www.networkB.edu to find the desti- 
nation without an IP address? 

30. What is the purpose of reverse DNS? Where is it used? 


Section 9-5 





31. What port number does SNMP use and what transport protocol? 

32. The SNMP MIB get request ifDescr returns what information from a router? 

33. What is the purpose of the MIB? 

34. Write the Cisco router command for configuring SNMP on a Cisco router. As- 
sume a community string of networking and set the permissions to read-only. 
Show the router prompt. 

35. The command show run is entered on a Cisco router. Describe what the output 
“SNMP-server test RO” means. 

36. What SNMP MIBs were most likely issued to the router discussed in 
section 9-7? 


Use Figure 9-20 to answer questions 37 to 41. 
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FIGURE 9-20 For problems 37-41. 


37. What MIB was issued? 

38. What information was returned? 

39. What port number was used? 

40. What protocol is being used? How do you know? 

41. Who is the manufacturer of this networking device? 

42. What are the two types of devices defined by PoE? 

43. What should you check if you are installing a Power over Ethernet connection 
using computer equipment from two different manufactures? 

44. Cite four benefits of Power over Ethernet. 

45. What is resistive power discovery, and how does it work? 

46. What wire pairs are used in PoE? 

47. How much power can a class 0 PD PoE device source? 

48. What are the benefits of PoE Plus? 


Section 9-6 


49. What is a VLAN? 
50. List the three types of VLANs. | | 
51. What type of VLAN is port-based? 
52. What commands are used to assign the IP address 192.168.20.5 to VLANI? 
53. What switch command is used to display the interfaces assigned to a VLAN? 
54. What is the purpose of the VLAN database? 
55. List the commands used to create VLANS5 and name this VLAN Marketing 
group. 
56. List the commands used to assign FAO/5 to the Marketing-group VLAN 
(VLANS). Show the switch prompts. 
57. What is the purpose of the Spanning-Tree Protocol? 
58. What is a BPDU, and what its purpose? 
59. Discuss how a root switch 1s elected. 





383 


60. What are the five STP protocol states? 

61. A BPDU data packet shows that the “Hello Time” is 2.0 secs. What informa- 
tion does this provide? 

62. A BPDU data packet lists the “Forward Delay” as 15 seconds. What informa- 
tion does this provide? 


Critical Thinking 


63. Your supervisor asks you if a layer 2 switch could be used in the core of the 
campus network. Prepare a response to your supervisor. Be sure to justify your 
recommendation. 

64. A 1Gbps data link is to be set-up between building A and building B in a cam- 
pus network. Does it matter if the link 1s fiber or microwave or some other me- 
dia? Explain your answer. 
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10-1 INTRODUCTION 


The objective of this chapter is to provide an overview of network security. A cam- 
pus network is vulnerable to many types of network attacks. While network attacks 
can’t be prevented, there are some steps that can be taken to minimize the impact an 
attack has on the network. 

The first type of attack examined in this chapter is intrusion, an attacker gain- 
ing access to a remote network system. There are many ways by which an attacker 
can gain access to the network. These are social engineering, password cracking, 
packet sniffing, vulnerable software, viruses, and wireless connections (see Figure 
10-1). These issues are examined in section 10-2. Denial of service is an attack with 
a goal of preventing services to a machine or to a network. This can be accomplished 
by flooding the network with lots of data packets or through hacking vulnerable soft- 
ware. For example, a certain software package might reboot if a certain sequence of 
data packets is sent to the host computer. This is a common problem because many 
software packages have this vulnerability. Denial of service and distributed denial of 
service attacks are examined in section 10-3. 







ae Social engineering 


Password cracking 

Packet sniffing Remote 

Vulnerable software Network 
Attack Viruses 

Wireless connections 


Attacker 


FIGURE 10-1 The ways an attacker can gain access to a remote network. 


Techniques for using firewalls to protect a network are examined in section 
10-4. This section discusses the role of stateful firewalls in protecting a network. In 
addition this section demonstrates how to configure access lists on a router. The con- 
cept of intrusion detection is briefly examined in section 10-5. The last section (10-6) 
uses the Surveyor Demo protocol analyzer to examine the difference in unsecured 
and secured data packets generated from a telnet session and an SSH (secure shell). 


10-2 INTRUSION (HOW AN ATTACKER GAINS 
CONTROL OF A NETWORK) 


Hackers use many techniques to gain control of a network. The network administra- 
tor needs to be aware of the different ways an intruder can gain network access or 
even control. The information presented in this chapter is an example of what the 
hacker already knows and what the network administrator needs to know to protect 
the network. 
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Social Engineering 


The first issue of intrusion is social engineering. This is a way for an intruder to gain Social Engineering 
enough information from people to gain access to the network. As an example, an at- A way for an intruder to 
tacker calls a user on a network and claims he or she is from the computer support di- Obtain enough information 
vision of the network. The attacker tells the user that there is a problem with the user’s from people to gain access 
account and then asks for the user’s name and password. This is shown in Figure EOE SEE VOE 

10-2. Often a user will blindly provide the information, not realizing that the person 

calling is not associated with the network and is in fact an attacker. This gives the at- 

tacker an account (username and password) to attack the network from. This is just 

one example of social engineering. Some attackers use discarded trash to gain access 

to user passwords. This problem is not completely solvable because as the number of 

users increases, so do the possible ways to attack the network. The solution is edu- 

cating users about not sharing information on how they access the network and to al- 

ways require identification from support staff. 









I'm from network 
support. I need your 
user name and password. 





FIGURE 10-2 An example of social engineering. 


Password Cracking 


If the attacker has access to the user’s network but can’t get the password from the Password Cracking 
user, the attacker can use password cracking. This can be done via brute force or via The attacker tries to guess 
checking for “weak” passwords. Most networks require their users to use strong the user's password 
passwords. 

In password cracking, the attacker can try to guess the user’s password. One Dictionary Attack 
method is the dictionary attack. The dictionary attack (Figure 10-3) uses known Uses known passwords and 
passwords and many variations (upper- and lowercase and combinations) to try to log many variations (upper and 
in to your account. This is why many network systems prompt you not to use a dic- lowercase and combinations) 
tionary word as a password. A brute force attack means the attacker uses every pos- t° try to log in to your 
sible combination of characters for the password. (Note: Some attackers will use a accpuhi 
combination brute force and dictionary attacks.) Brute Force Attack 

Attacker uses every possible 
combination of characters 
for the password 
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FIGURE 10-3 The dictionary attack. 


Here are steps for preventing password cracking: 


e Don’t use passwords that are dictionary words. 

e Don’t use your username as your password. 

e Don’t use your username spelled backward as your password. 

e Limit the number of login attempts. 

e Make your password strong, which means it is sufficiently long (eight or more 
characters) and is an alphanumeric combination (for example, A b 1 & G2 5h). 

e Change passwords often. 


Packet Sniffing 
Packet Sniffing Another way attackers can obtain a password is by sniffing the network’s data pack- 
A technique where the ets. Packet sniffing assumes that the attacker can see the network data packets. The 
contents of data packets are attacker will have to insert a device on the network that allows him or her to see the 
watched data packets (Figure 10-4). The attacker will watch the data packets until a telnet or 


FTP data packet passes (or one from many of the other applications that have unen- 
crypted logins). Many of these applications pass the username and password over the 
network in plain text. Plain text means that the information is in a human readable 
form. If the attacker captures all data packets from a user’s computer, then the chances 
are good that the attacker can obtain the user’s login name and password on one of 
the network’s computers. The way to prevent this is by encrypting the user’s name 
and password. An encrypted alternative to telnet is SSH (secure shell). The packets 
that pass across this SSH connection are encrypted. The reasons for securing data 
packets are examined in section 10-6. SSL (secure socket layer) is an encryption used 
by Web servers. For example, the packet transmission is encrypted when a credit card 
number is entered. There is also a secure version of FTP. 

IPsec In these examples, the security is implemented at the application layer. Secu- 

IP security rity can also be implemented at layer 3 using IPsec (IP security). In IPsec each packet 
is encrypted prior to transmission across the network link. IPsec is also a method used 
to encrypt VPN tunnels (see Chapter 8). 


d 390 Chapter 10 ¢ Network Security 


390 — 








Attacker Computer 1 


The attacker sees the 


data packets being ha a o Se 
exchanged between Bannann 
computers 1 and 2. Computer 2 


FIGURE 10-4 An example of packet sniffing. 


Vulnerable Software 


In the process of writing large amounts of code, errors happen that can open access 
to the code and to a network. The basic attack that capitalizes on these errors is the 
buffer overflow. The buffer overflow happens when a program attempts to put more 
data into a buffer than it was configured to hold and the overflow writes past the end 
of the buffer and over adjacent memory locations. The program stack contains data 
plus instructions that it will run. Assume, for example, that a program includes a vari- 
able size of 128 bytes. It is possible that the programmer didn’t include instructions 
to check the maximum size of the variable to make sure it is smaller than 128 bytes. 
An attacker will look through pages and pages of source code and look for a vulner- 
ability that allows the attacker to issue a buffer overflow. The attacker finds the vari- 
able and sends data to the application assigned to that variable. For example, a web 
application could have a vulnerability with long URLs assigned to a variable within 
it. If the attacker makes the URL long enough, then the buffer overflow could allow 
the attacker’s code to be placed in the stack. When the program counter gets to the 
inserted code, the inserted code is run, and the attacker then has remote access to the 
machine. This is shown in Figure 10-5. 
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FIGURE 10-5 An example of a buffer overflow attack. 


Buffer Overflow 
Happens when a program 


tries to put more data into a 
buffer than it was configured 


to hold 
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Sometimes buffer overflows don’t allow instructions to be run, but rather the 
application will crash. This is used in denial of service attacks, examined in section 
10-4. A common code that gets run in buffer overflow attacks is setting up a backdoor 
to gain entry into the computer. What the attacker is doing is creating an application 
on a port and then connecting to the port. The attacker can also use this to place 
viruses in the computer. For example, the attacker finds a vulnerability in the source 
code for an operating system, such as the SSL code on a web server. The attacker 
downloads malicious code onto the server and then connects to the machine and in- 
structs the code to begin attacking other machines. 


Steps for Preventing Vulnerable Software Attacks 


following to prevent vulnerable software attacks: 


It is important to do the 


e Keep software patches and service packs for the operating system current. 

e Turn off all services and ports that are not needed on a machine. For example, 
if your machine does not use Web service, then turn this service off. Leaving 
these services on is like leaving the windows and doors open to your house. You 
are just inviting an attacker to come in. If you aren’t using a service, shut the 
access. The command netstat -a can be used to display the ports currently open 
on the Windows operating system. This command shows who is connected to 
your machine and the port numbers. An example is provided here: 


netstat -a -b 

(-a) Command used to 
display the ports currently 
open on a Windows 
operating system and (-b) 
used to display the 
executable involved in 
creating the connection or 


listening port c: netstat -a 
Active Connections 


Proto Local Address Foreign Address State 

TCP pcsalsa2 :1087 PC - SALSA2: 0 LISTENING 
TCP pcsalsa2 :1088 PC - SALSA2: 0 LISTENING 
TCP pcsalsa2 :1089 PC - SALSA2: 0 LISTENING 
TCP pcsalsa2 :1090 PC - SALSA2: 0 LISTENING 
TCP pcsalsa2 :135 PC -SALSA2:@ LISTENING 
TCP pcsalsa2 :1025 PC - SALSA2: 0 LISTENING 
TCP pcsalsa2 :1087 salsa.chile.Edu:80 ESTABLISHED 
TCP pcsalsa2 :1088 salsa.chile.Edu:80 ESTABLISHED 
TCP pcsalsa2 :1089 salsa.chile.Edu:80 CLOSE WAIT 
TCP pcsalsa2 :1090 salsa.chile.Edu:8@ | CLOSE WAIT 
TCP pcsalsa2 :137 PC -SALSA2:@ LISTENING 
TCP pcsalsa2 :138 PC - SALSA2: 0 LISTENING 
TCP pcsalsa2 :nbsession PC - SALSA2: 0 LISTENING 
UDP pcsalsa2 :nbname ~ * 

UDP pcsalsa2 :nbdatagram *: ~ 


Another useful command is netstat -b, which shows the executable involved 
creating the connection or listening port. An example is provided next that shows that 
Internet Explorer was used to establish the connection. 


c: netstat - b 
Active Connections 


State 
ESTABLISHED 


PID 
876 


Proto Local Address 
TCP pc-salsa:1152 
[iexplore.exe] 


Foreign Address 
salsa.chile.edu:http 


The ports that are listening are just waiting for a connection. For example, ports 
135 and 137 (shown in the netstat —a example) are the NETBIOS and file sharing 
ports for Microsoft. Every port that is established shows listening, and that port can 
accept a connection. For example, 1f your application is vulnerable and it is listening, 
then the machine is vulnerable to an attack. It is good idea to check to see what ap- 
plications are running on your machine. And again, it is a good idea to turn off ports 
that are not needed. The steps for turning off ports depend on the application. For 
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example, if port 80 (HTTP) is running, then go to the Windows services and turn off 
the web application. 


Viruses and Worms 


A virus is a piece of malicious computer code that when run on your machine can 
damage your hardware, software, or other files. Computer viruses typically are at- 
tached to executable files and can be spread when the infected program is run. The 
computer virus is spread by sharing infected files or sending emails with the attached 
files that are infected with the virus. 

Problems caused by viruses include the following: 


e Annoyance 

e Clogging up the mail server 

e Denial of service 

e Data loss 

e Open holes for others to access your machine 


Viruses used to be a problem passed along by exchanging computer disks. To- 
day, most viruses are exchanged via attachments to email, as shown in Figure 10-6. 
For example, a user receives an email that says “Look at this!” trying to coax the user 
into opening the attachment. By opening the attachment, the user could possibly in- 
fect his or her computer with a virus. 


Victim's 
Computer 


Attatchment 





FIGURE 10-6 An example of how computer viruses are spread. 


A computer worm is a type of computer virus that attacks computers, typically 
proliferating by itself (self-replicating) and can deny service to networks. Computer 
worms do not need to be attached to an executable file to be distributed but can use 
the network to send copies of themselves to other computers. A common objective of 
a worm is to establish a “back door” in the infected computer, which enables an at- 
tacker access to someone’s computer. 

The following are steps to take to prevent viruses: 


e Open only attachments that come from known sources. Even this can be a prob- 
lem because email addresses can be spoofed, or the message can come from a 
known person whose computer has been infected. 

e Require that the emails you receive be digitally signed so that you can verify 
the sender. 

e Always run antivirus software on the client machines. The antivirus software is 
not 100% effective but will catch most viruses. 

e Include email server filters to block specific types of emails or attachments. 

e Keep the antivirus software up to date. 

e Keep the operating system and applications software current 

e Use personal firewalls when possible 


Section 10-2 e INTRUSION (HOW AN ATTACKER GAINS CONTROL OF A NETWORK) 


S pescmenn NUNES One ROA ORRNNIEY 0 


Virus 

A piece of malicious 
computer code that, when 
opened, can damage your 
hardware, software, or other 
files. 


Worm 

A type of virus that attacks 
computers, typically 
proliferates by itself and can 
deny service to networks 
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WEP (Wired Equivalent 
Privacy) 

The goal is to provide the 
Same security of a wireless 
connection that a wired 
connection provides 


WPA, WPA2 
Improved methods for 
securing wireless transfers 


War Driving 

Using wireless equipment to 
detect wireless management 
packets 


Wireless Vulnerabilities 


With WEP (wired equivalent privacy), the goal is to provide the same security for 
a wireless connection that a wired connection provides. The problem with WEP is 
that the encryption is not very strong, and an attacker can gain access through de- 
crypting the data packets. An improvement with wireless security is provided with 
WPA and WPA2. WPA stands for WiFi Protected Access, and it supports user au- 
thentication and replaces WEP as the primary way for securing wireless transfers. 
WPA2 is an improved version of WPA that enhances wireless security by incorpo- 
rating authentication of the user. 

War driving is a term that applies to driving with an antenna out the door con- 
nected to a mobile device running Windows or Linux (Figure 10-7). A wireless card 
in a PC and a software application are used to detect management packets that come 
from the wireless access points. Some access points allow the management packets 
to be turned off. All 11 channels must be cycled through to check for data (manage- 
ment packets). The software can also determine if wireless security is turned on, the 
type of access points, and so on. If wireless security is not enabled, then the attacker 
can attempt to break into the network. If the wireless security features are not enabled, 
the packets that come from the access points can be viewed. 

Here are three steps to take to protecting a wireless network: 


e Make sure WPA is enabled. 
e Encrypt the data that is being transferred via the wireless network 
e Use a wireless system with more robust security (for example, EAP-FAST ). 





FIGURE 10-7 An example of war driving. The attacker in the car can pick up the wireless 
data packets’ access points. 
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10-3 DENIAL OF SERVICE 


Denial of Service (DoS) means that a service is being denied to a computer, network, 
or network server. Denial of service attacks can be on individual machines, on the net- 
work that connects the machines, or on all machines simultaneously. 

You can initiate a denial of service attack by exploiting software vulnerabili- 
ties. For example, a software vulnerability can permit a buffer overflow, causing the 
machine to crash. This affects all applications, even secure applications. 

The vulnerable software denial of service attack attacks the system by making 
it reboot repeatedly. Denial of service attacks can also be on routers via the software 
options that are available for connecting to a router. For example, SNMP manage- 
ment software is marketed by many companies and is supported by many computer 
platforms. Many of the SNMP packages use a similar core code that could contain 
the same vulnerability. 

Another denial of service attack is a SYN attack. This refers to the TCP SYN 
(synchronizing) packet (introduced in Chapter 5). An attacker sends many TCP SYN 
packets to a host, opening up many TCP sessions. The host machine has limited mem- 
ory set aside for open connections. If all the TCP connections are opened by the SYN 
attack, other users are kept from accessing services from the computer because the 
connection buffer is full. Most current operating systems take countermeasures 
against the SYN attack. 

Denial of service attacks can affect the network bandwidth and the end points 
on the network. The classic example is the Smurf attack (Figure 10-8), which required 
few resources from the attacker. The attacker sent a small packet and got many pack- 
ets in return. The attacker would pick a victim and an intermediate site. Figure 10-8 
shows an attacker site, an intermediate site, and a victim site. The intermediate site 
has subnets of 10.10.1.0 and 10.10.2.0. The victim is at 10.10.1.0. The attackers send 
a packet to 10.10.1.255, which is a broadcast address for the 10.10.1.0 subnet. The 
attacker will spoof the source address information, making it look as if the packet 
came from the victim’s network. All of the machines on the 10.10.1.0 subnet will send 
areply back to the source address. Remember, the attacker has spoofed the source ad- 
dress so the replies will be sent to the victim’s network. If this attack were increased 
to all of the subnets in the 10.0.0.0 network, then an enormous amount of data pack- 
ets will be sent to the victim’s network. This enables the attacker to generate a lot of 
data traffic on the victim’s network without requiring the attacker to have many re- 
sources. 


Intermediate 10.10.1.0 
10.10.2.0 


Attacker 


FIGURE 10-8 An example of a Smurf attack. 
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This type of attack is not new, and there are some steps that can be taken to stop 
a network from becoming an intermediate site. Cisco routers have an interface com- 
mand that blocks broadcast packets to that subnet. This prevents a network from be- 
coming an intermediate site for a network attack such as this. Make sure this 
command or a similar command is a default or has been enabled on the router’s in- 
terface: 


no ip directed-broadcast 


Directed Broadcast But aren’t layer 3 devices supposed to stop broadcasts? This is true for general 
The broadcast is sent to a broadcasts (all 32 bits set to 1s or “FF FF FFF F” or 255.255.255.255). Routers will 
specific subnet always stop these broadcasts. The type of broadcast used in this attack is a directed 


broadcast, which is passed through the router. The no ip directed- broadcast com- 
mand enables only the router to reply. 


Spoof To prevent your network from becoming a host for an attacker, use access lists 
Inserting a different IP to allow only specific sources from the network to enter the router’s interfaces. For 
address in place of an IP example, network B connects to a router. Only packets sourced from network B are 
packet's source address to allowed to pass through the router. The downside of this is it does become a mainte- 
make it appear that the nance problem: keeping track of the access lists can be a challenge for the network 


packet came from another 


ae administrator and processing access lists on the router is processor intensive and can 
networ 


slow the throughput of the packets. However, this does help eliminate spoofed pack- 
ets. Spoof means the attacker doesn’t use his IP address but will insert an IP address 
from the victim’s network or another network as the source IP. There is a lot of soft- 
ware on the Internet that enables someone to spoof an IP address. 

To prevent yourself from becoming a victim, well...there isn’t a way unless you 
aren’t connected to any network or to any other users. 


Distributed Denial of Service Attacks (DDoS) 


The number of packets that can be generated by a single packet as in the Smurf attack 
can be limited on a router. However, attackers now use worms to distribute an attack. 
The attacker will do a port scan and look for an open port or a software application 
that is vulnerable to an attack. The machine 1s hacked (attacked) and distributes the 
malicious software. The attacker will repeat this for many victim machines. Once the 
software is on the victim machines, the attacker can issue a command or instruction 
that starts the attack on a specific site. The attack will come from a potentially mas- 
sive amount of machines that the worm has infected. 

To stop DDoS attacks, stop intrusions to the network, as discussed in section 
10-2. The bottom line is PREVENT INTRUSIONS. 


10-4 FIREWALLS AND ACCESS LISTS 


Firewall Firewalls are used in computer networks for protection against the “network ele- 
Used in computer networks ments” (for example, intrusions, denial of service attacks, etc.). Access lists (ACLs) 
for protecting the network are the basic form of firewall protection, although an access list is not stateful and is 
Access Lists (ACLs) not by itself a firewall. Access lists can be configured ona router, on a true dedicated 
firewall, or on the host computer. Firewalls are examined first in this section. 

Firewalls allow traffic from inside the network to exit but don’t allow general 
traffic from the outside to enter the network. The firewall monitors the data traffic and 
recognizes where packets are coming from. The firewall will allow packets from the 


A basic form of firewall 
protection 


C 
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outside to enter the network if they match a request from within the network. Fire- 
walls are based on three technologies: 


e Packet filtering 
e Proxy server 
e Stateful packet filtering 


In packet filtering, a limit is placed on the packets that can enter the network. Packet Filtering 
Packet filtering can also limit information moving from one segment to another. Limit is placed on the 
ACLs are used to enable the firewall to accept or deny data packets. The disadvan- information that can enter 
tages of packet filtering are the network 


e Packets can still enter the network by fragmenting the data packets. 
e Itis difficult to implement complex ACLs. 
e Not all network services can be filtered. 


A proxy server is used by clients to communicate with secure systems using a Proxy Server 
proxy. The client gets access to the network via the proxy server. This step is used to Clients go through a proxy to 
authenticate the user, establish the session, and set policies. The client must connect communicate with secure 
to the proxy server to connect to resources outside the network. The disadvantages of Systems 
the proxy server are 


e The proxy server can run very slow. 

e Adding services can be difficult. 

e There can be a potential problem with network failure if the proxy server fails 
or is corrupted. 


In a stateful firewall the inbound and outbound data packets are compared to Stateful 
determine if a connection should be allowed. This includes tracking the source and Keeps track of the data 
destination port numbers and sequence numbers as well as the source and destination Packet flow 
IP addresses. This technique is used to protect the inside of the network from the out- 
side world but still allow traffic to go from the inside to the outside and back. The fire- 
wall needs to be stateful to accomplish this. 

For example, a machine called NVL is on the inside of a network. NVL estab- 
lishes a connection to the outside at www.network-A.edu. The connection requires 
the initial TCP handshake sequence and the first SYN packet hits the firewall. The 
firewall has been configured to allow packets to leave the network. The firewall rec- 
ognizes that a connection is being established outside the network and the firewall 
creates a state that includes the source and destination IP address numbers for the con- 
nection. The TCP packets arrive at www.network-A.edu (port 80) and the server at 
networkA.edu returns a SY N-ACK packet back through the firewall. The firewall ex- 
amines the SYN-ACK packet, and matches the stored source and destination IP ad- 
dresses with the packet’s source/destination IP addresses and port numbers. If the 
information matches, the IP packets are allowed to pass. This repeats until the con- 
nection ends. 

What if an attacker tries to spoof the firewall to gain access to the interior of 
the network? In this case, a connection already exists between NVL and www.net- 
work-A.edu. The attacker spoofs the network-A.edu domain www server’s IP address 
and port 80 (the Web server) and tries to use this to gain access to the network. Re- 
member, there is a sequence number associated with the data transfers in the TCP 
connection. The server recognizes that there is a discrepancy with the sequence and 
rejects the hacker’s connection, preventing the attack. 
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But what if the campus network has a Web server? How are outside users al- 
lowed access? This requires that holes must be opened in the network that allow data 
packets to pass through. The three most common traffic types that require holes to be 
opened are Web servers, DNS, and email. The firewall must be modified so that any- 
body can connect to the Web server via port 80. But what if a vulnerability is discov- 
ered on port 80 for the server’s operating system? When you open ports, the network 
administrator must continually upgrade the software so that vulnerabilities are 
removed. The Web server may also need to have its own firewall. Most firewalls can 
perform deep packet inspection. This may catch some of protocol vulnerabilities. 

A big problem with firewalls is that users assume a firewall catches all possi- 
ble problems. This is a wrong assumption. The user may be slow to update the patches 
and fixes to the software. For example, an attacker sends an email message with an 
attachment to a user. The user opens the attachment and unknowingly loads a Trojan 
horse on his or her computer that scans all of the machines on the LAN, checking for 
any possible open ports, compromising the entire LAN. A firewall is not the end-to- 
end solution. 


Attack Prevention 


A general rule of thumb is to place the firewall close to the machines you want to pro- 
tect (for example, the network servers). Do not assume that the clients on the network 
will never attack your system. Clients can and will get viruses on their machines. 

Create demilitarized zones for the outside servers, which means that they are 
moved to a place on the network so that they are isolated. If the machines are com- 
promised, the intruder will have limited access to the inside of the network. 

Firewalls are not the solution for everybody. Open networks such as a univer- 
sity’s have limited areas where a firewall can be placed. For example, firewalls will 
be placed close to critical machines such as academic records. There are so many en- 
tities on a university campus network that need connections around the world. The 
university campus network will have multiple Web servers that can’t be centrally lo- 
cated. If a firewall was placed on the whole university network, many holes would be 
required and thus negate the usefulness of the firewall. One solution is to put in server 
firewalls. 


Access Lists Access lists provide very basic protection for the network. The access 
list compares the source and destination IP address and the source and destination 
port numbers and sometimes might examine the packet contents above layer 4 (trans- 
port). However, access lists primarily focus on the network (layer 3) and transport 
(layer 4) layers. A router is often placed on the edge of a network to handle data traf- 
fic entering and exiting the network, and it is common practice to block some data 
traffic. 
The first two steps for applying access lists on a router are 


1. Identify the problem 
2. Decide where to place the access list 


SMB There can be many problems encountered on a network that require the appli- 
Server message block cation of an access list to a router. For example, the network administrator will block 
certain types of data packets from entering and exiting a network. For example, the 
Microsoft NetBIOS protocol for mapping drives (also called SMB [server message 
block] over TCP) is an intranet protocol and is not intended to be run over the Internet. 
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SMB data packets use ports 137, 138, and 139. SMB packets will be blocked from 
entering and exiting the network. The next issue is where to place the access list. In 
this case, the best place to apply the access list is the network’s Internet connection. 

The following discussion describes the steps for applying an access list to a 
router. The network management protocol SNMP (port 161) can be blocked to pre- 
vent an outside attacker from getting into your router(s). The following is an exam- 
ple of how to configure an edge router to block SNMP from entering a specific LAN. 
In this case the term “edge router” is describing the Internet connection to the cam- 
pus network, and the LAN being protected is LAN B. The network topology is shown 
in Figure 10-9. 


Internet 
Cloud 


LAN B 


FIGURE 10-9 An example of setting an access list on an edge router to block SNMP data 
packets. 


The first step for configuring the access list is to enter the router’s configura- 
tion mode using the configure terminal command, as shown: 


RouterB# conf t 
RouterB(config)# 


Next, define the access list to be applied to the router interface. Access lists can 
be specified in two ways: They can be either a standard or extended type. A standard 
access list is used when specifying access for only IP addresses. An extended access 
list allows the addition of port numbers. For example, the access list could be defined 
to deny SMB data packets to enter or exit the network. 

In the following example, an extended access list of 100 is being defined with 
the instructions to deny UDP packets from any source going to any destination equal 
to port 161 (SNMP). (Note: The 100 is just an identifier used to indicate what list is 
being defined.) The command access-list 100 deny udp any any eq 161 is entered. 

This command is used to deny all SNMP data packets from entering or exiting 
the network. Remember, the first step is to identify the problem. Unauthorized access 
to the network’s router must be prevented, so the access list 1s being applied. SNMP 
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uses the UDP protocol for transferring data; therefore, it 1s also a good idea to block 
UDP packets. The command access-list 100 deny udp any any eq snmp is used to in- 
struct the router to deny UDP packets from any source to any destination equal to 
SNMP. In this example, SNMP is used instead of 161. Cisco routers allow the use of 
names for well-known port numbers, for example, SNMP (port 161) [see Chapter 5 
for a discussion on well-known ports]. The entry of these two commands from the 
router’s (config)# prompt is provided: 


RouterB(config)# access-list 100 deny tcp any any eq 161 
RouterB(config)# access-list 100 deny udp any any eq snmp 


permit ip any any These commands form an access list that blocks TCP and UDP data packets 

The instruction added to the from any source going to any destination equal to SNMP (port 161). There is an im- 

last line of an access list to plicit denial at the end of an access list in Cisco routers, and this statement alone will 

allow all other data packets block all data packets. The access lists must be modified to permit any other data 

to enter and exit the router Packets to enter and exit the LAN. The command access-list permit ip any any must 
be added to the last line of an access list to allow all other data packets to enter and 
exit the router. An example is shown here. This instruction is for access-list 100, and 
it instructs the router to permit IP packets from any source to any destination: 


RouterB(config)# access-list 100 permit ip any any 


The contents of the access list just created can be checked using the command 
show access-list 100, as demonstrated here: 

RouterB# sh access-list 100 

Extended IP access list 100 

deny tcp any any eq 161 

deny udp any any eq snmp 

permit ip any any 

The next step is to decide where to place the access list. Specifically, this is ask- 
ing what router interface is to be used to apply the list. In this case, the access list is 
to be applied to the SerialO interface and to the inbound data packets (coming from 
the Internet). The access list can be applied to both in and outbound data packets. The 
format of the command is 


Router (config)# int s@ 
Router (config-if)# ip access-group 100 in 


The 100 matches the number from the access list being applied. This access list 
is being applied on the in direction . This denies any SNMP packets from the outside. 
If this command was modified to ip access-group 100 out, this would deny any 
SNMP packets coming from inside the network going out. This would prevent users 
on the network to do SNMP queries on the Internet, but it would allow SNMP queries 
from the outside to come in. This is obviously the opposite of the intent of the access 
list. There is a limit on applying access lists to a router’s interface, one access list—in 
per interface and one access list—out/interface. The following example demonstrates 
the use of an access list. 


| 
Example 10-1 


Problem 


Develop an access list to prevent any port 137 SMB data packets from anywhere or 
going anywhere to enter or exit the router’s SerialO interface. 
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Solution 
Configure the router to use access list 120: 


access-list 120 deny tcp any any eq 137 
access-list 120 permit ip any any 


Apply the access list to the SerialO interface: 


ip access-group 120 

in ip access-group 

120 out 
Extended access lists identifiers are not restricted to numbers. A more convenient 
way to identify them is to use a name to describe the purpose of the access list. For 
example, in the previous example, an access list called “block-snmp” could be 
used. The network administrator can quickly identify the purpose of the list without 
having to check each entry. An example is shown: 


LAN-B(config)#ip access-list extended block-snmp 
LAN-B(config-ext-nacl)#deny tcp any any eq 161 
LAN-B(config-ext-nacl)#deny udp any any eq snnp 
LAN-B(config-ext-nacl)#permit ip any any 
LAN -B(config-ext-nacl)# end 
LAN-B#sh access-list 
Extended IP access list 100 

10 deny tcp any any eq 161 

20 deny udp any any eq snmp 

30 permit ip any any 
Extended IP access list block-snmp 

10 deny tcp any any eq 161 

20 deny udp any any eq snmp 

30 permit ip any any 


Notice the show access-list command lists both the “100” and the “block-snmp”’ ac- 
cess lists. Both lists actually do the same thing. Next, the “block-snmp” access list 
is applied to the router’s Serial interface, as shown: 


LAN-B(config)#int sø 
LAN-B(config-if)#ip access-group block-snmp in 


Example 10-2 demonstrates an application of the named access list. 
| 
Example 10-2 


Problem 
Create an access list to block any UDP packets from entering the Seriall interface 
on a router. Specify an extended access list of “block-udp.” 
Solution 
From the router’s (config)# prompt: 
ip access-list extended block -udp 
deny udp any any 
permit ip any any 
On the serial interface: 


interface si 
ip access-group block-udp in 


Section 10-4 e FIREWALLS AND ACCESS LISTS 401 


O O 


An interesting statistic to look at is how many times an access list has been 
matched. The command show access-list followed by the name or number of the 
list enables the statistics to be viewed. The (# matches) indicates how many times 
there has been a match to the access list. An example is shown here for the “block- 
snmp” access list: 


LAN-B#sh access-list block-snmp 
Extended IP access list block-snmp 
deny tcp any any eq 161 
deny udp any any eq snmp 
permit ip any any (7 matches) 
LAN-B#sh access-list block-snmp 
Extended IP access list block-snmp 
deny tcp any any eq 161 (6 matches) 
deny udp any any eq snmp 
permit ip any any (7 matches) 
The first display for the show access-list indicates that no packets have been de- 
nied, but there have been seven matches for permit ip any any. The second group 
shows that TCP data packets have been denied six times. This information can be 
useful for the network administrator when evaluating the effectiveness of an access 
list. There are times when a host with a specific IP address needs to be denied. For 
example, an attacker could have gained access to a host computer in the network 
and configured it to continually ping a server, attempting to generate a denial of 
service or just to slow down data traffic. Another possibility is the computer could 
be on a host external to the network that is continually pinging a server within the 
network. The network administrator examines the data traffic and determines that 
the IP address of the attack is from a remote computer (192.168.12.5). The com- 
puter is not in the administrator’s LAN; therefore, the data traffic must be stopped 
in the administrator’s network. Configuring an access list to deny any packets from 
the remote host can do this. Assume that the data traffic is entering the network via 
the SerialO interface on RouterB, the Internet router, as shown in Figure 10-10. The 
following demonstrates how the access list could be configured: 


LAN-B(config)#ip access-list extended block-badguy 
LAN-B(config-ext-nacl)#deny ip host 192.168.12.5 any 
LAN-B(config-ext-nacl)#permit ip any any 


LAN-B(config-ext-nacl)#int ser@ 
LAN-B(config-if)#ip access-group block-badguy in 


Host This example shows that an extended access list called “block-badguy” was cre- 
Enables a specific host IP ated. The access list denies source packets from the host 192.168.12.5 with any des- 
address to be entered in the} _tination. The host entry enables a specific IP address to be entered. Next the access 
access list list is applied to the router’s SerialO interface in the in direction. The in describes 


that the list is applied to any data packets coming into the interface. Example 10-3 
shows the blocking of a host IP address. 
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FIGURE 10-10 An example of applying an access list to stop data traffic from a remote 
host. 


| 
Example 10-3 


Problem 


Create an access list to block any data traffic from the IP address 192.168.12.5 to 
anywhere. Specify an extended access list name of “border-router.’” Apply the ac- 
cess list to the router’s Serial] interface. Assume that the router interface is con- 
nected to the Internet, and the 192.168.12.5 host is external to the network. 


Solution 


ip access-list extended border-router 
deny ip host 192.168.12.5 any 

permit any any 

int s1 

ip access-group border-router in 


A bad thing about access lists is that they are not stateful. This means they don’t 
keep track of the data packet flow. They only examine the current packet, and they 
contain no information about the recent history of data traffic on that connection. 
This makes it hard for access lists to allow connections to be made to the outside 
world. 


Access lists try to address this need for allowing a connection from the outside to 
the inside if an “Established” connection exists. This requires using a flag in the 
TCP header, but TCP headers can be falsified; therefore, the access list is useless 
for verifying an established connection. Someone could fake an acknowledgement 
flag so his or her packet could enter the network. 
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10-5 INTRUSION DETECTION 


Intrusion detection is very similar to firewalls in the way it looks at data packets. 
The main idea with intrusion detection is to monitor traffic passing through your net- 
work so that potential or ongoing attacks can be detected. The intrusion box will sit 
on the edge of your network so that data packets entering from the Internet can be 
monitored, as shown in Figure 10-11. 


Intrusion 
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signatures 
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FIGURE 10-11 An example of using an intrusion box. 


The following are examples of what an intrusion box looks for: 


Signatures—Indicators of known attacks, for example, patterns of probes 


Probing—Indicators of repeated attempts to make connections to certain ma- 
chines and/or ports 


Many network attacks are well-known, and the intrusion detector will know 
what to look for. The device must be kept up to date because there are always new at- 
tacks. For example, an attacker is probing the campus network hoping to find a vul- 
nerable machine and scans all ports from 1 to 2048 on one machine. The intrusion 
box identifies that the same outside machine is attempting to connect to many ports 
on the same machine inside the network within a small period of time. The intrusion 
box will issue an alarm indicating that a host computer in the network is being 
probed. It is up to the network administrator to take action if this is indeed an attack. 
The network administrator could stop the data traffic from the attacker by using an 
access list deny command of the attacker’s source IP address. The network adminis- 
trator could also send a warning to the attacker computer indicating that the machine 
is attacking the campus network. Remember, the machine that is attacking could have 
been compromised by an attacker or a virus, and the owner of the machine may not 
be aware that the machine has been compromised. 

The big problem with intrusion detection is that many common applications 
can falsely trigger the intrusion box into thinking an attack is taking place. It takes a 
lot of tweaking to configure the intrusion box so that false triggers can be avoided. It 
also takes a lot of labor-hours to set up the box and to monitor its alarms. 

The intrusion box is resource-intensive, and some networks only use it where 
critical information needs to be protected. It is important for the network administra- 
tor to examine the cost-benefit ratio of placing an intrusion box on the network. The 
costs of protecting your asset should not be greater than the value of your asset. Why 
spend $100,000 to protect $1,000 in net assets? 


Network Security 
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10-6 ANALYZING UNSECURED DATA PACKETS 


This chapter has examined the many ways an attacker can attack a network. It is im- 
portant that the network administrator understand what needs to be done to protect 
the network. The administrator must also understand that many of the data packets 
passing across a network appear in plain text form. In other words, the attacker can 
see the contents of the data packets using simple networking tools. 

This section examines the data packets exchanged during a telnet connection 
from the network administrator to a router. A router allows a telnet connection from 
a user on the network if the telnet service is enabled. Recall, the commands are used 
to enable a telnet connection to a router. 

router(config)# line vty @ 4 

router(config-line)# password Chile 

router(config-line)# login 

In this case, assume that an attacker has gained physical access to the network 
and can monitor network data traffic. Figure 10-12 shows the setup for this. The at- 
tacker is sitting on the network and has somehow managed to capture the data traffic 


on the network. 











Network 
Administrator 





Attacker i, 


Router 


FIGURE 10-12 The setup for capturing a network’s data packets. 


In this example, the network administrator is telnetting to the router. The net- 
work administrator issues the command telnet 10.10.10.250 as shown in Figure 10-13. 
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c\ E:\WINDOWS\System32\cmd.exe 


User Access Verification 
Password: 

Router> 

Router>exit 

Connection to host lost. 


E:\Documents and Settings\Administrator.CHEWY>telnet 16.16.16.256_ 





FIGURE 10-13 The steps for telnetting to another networking device. 


The text User Access Verification is returned by the router and instructs the user 
to enter the telnet password as shown in Figure 10-14. 


ci Telnet 10.10.10.250 


User Access Verification 


Password: m 





FIGURE 10-14 The User Access Verification and the password prompt from the router. 


The network administrator then enters the password into the virtual terminal 
connection. In this example, the password is Chile. Telnet is a virtual terminal session, 
and each character is transmitted in a TCP data packet as it is typed. The administra- 
tor types the password and presses Enter. The next screen (Figure 10-15) shows that 
the network administrator has connected to the router, and the Router> prompt is 
displayed. 

Next let’s look at the information the attacker obtained. The setup for the attack 
is Shown in Figure 10-12. In this scenario, the attacker will typically obtain many data 
packets and will have to search through them to find the telnet sequence. This exam- 
ple contains only the data packets sent to and from the network administrator’s com- 
puter and the router. Figure 10-16 shows a portion of the captured network data 
traffic. (Note: This file is called [wireless-cap4 router login.cap], and is provided on 
the text’s Companion CD-ROM.) Packets 1, 2, and 3 establish the TCP connection 
for opening a telnet session with the router. Notice the listing of port 23 (the telnet 
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port). Packet six is highlighted; this is the first data transferred from the router. No- 
tice that in the middle of the image under Remote Terminal Protocol (TELNET) that 
the datais User Access Verification and Password, the same information displayed on 
the network administrator’s telnet screen. 


ci Telnet 10.10.10.250 


User Access Verification 


Password: 
Router’ m 





FIGURE 10-15 The screen showing that a connection has been made to the router. 


Im Surveyor Demo - Detail View - [ E:\wireless-cap-4 router login.cap ] - [Surveyor Demo Capture View - E:\wireless-cap-4 router... FE] EG 
=] Eile Edit Configuration View Module Monitor Views Capture Views Tools Window Help -lj x| 
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| ID | Status | Elapsed [sec] size | Destination | Source Summary 

D0000 -523.197 5 GG 5C3 Dell 2720C TC 3 SYN SEQ=36993045 5 
000002 .531. 099.160 64 Dell 272003 0050736C3 TCP SP=23 DP 44 SYN SEQ=390424195 
ntebabobe : s 5 cipacespcspe B 2 — D 


30000- 53 b0. 360 64 a } - 20C SEQ=36993045¢ 
0 .539. 800.280 70 2720C3 005073603 TE WILL Echo 


000005 -540.283.040 64 3 z 2720C7 TELNET C Port=1144 DO Echo 


000006 .551. 004.760 100 TELNET R Port=1144 












































window Size 4128 a 
CheckSum 0x0604 "Correct 
Urgent Pointer 0 
[42 bytes of data] 
Remote Terminal Protocol (TELNET) 
Data <0O0> <O0A> 
Data <OD><O0A> 
Data User Access Verification<0D><OA> 
Data <O0><OA> 
Data Password: 
Data/Fcs li 
Data/Padding [0 bytes] 
Frame Check Sequence |OxCS1DE7EF (Correct) hd 
Hex ASCII 
0000: 00 CO 4F 27 20 C7 00 SO 73 6C 31 F4 08 OO 45 cO 
0010: 00 52 00 02 00 OO FF 06 7E 98 OA OA 14 18 OA OA 
0020: 14 20 00 17 04 78 ES BG 01 59 DC 7E ES 94 50 18 
0030: 10 20 06 04 OO 00 OD OA OD OA SEN Cee oe 
0040: 63 63 65 EA 65 B72 69 66 E 74 69 
0050: G OD OA SO 61 73 73 77 GF 72 64 3A 20 
0060: C9 1D E7 EF 
0070 
Ready [Capture\Display Filter: None 


FIGURE 10-16 The first six data packets for the telnet session. 


Recall that when a telnet connection is made, the keystrokes are sent one at a 
tme. Figure 10-17 (a—e) shows that the password Chile can be extracted from the tel- 
net data packets, and the attacker even sees the Router prompt, as shown in Figure 
10-17 (f). 
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S 


SSH (Secure Shell) 
An encrypted version of 
telnet 


Remote Terminal Protocol (TELNET) —— 


‘Data CC 














Data/srcs 
Data/Padding [5 bytes] 
(a) Hex 
00a: OO S0 73 él 31 F4 OO CO 4F 27 20 CF O8 OO 45 OO -P5110.A0° ¢..E. 
ooi1o: 00 29 72 Ac 40 00 80 ÜG 00 00 OA OA 14 70 O04 OA a n POr 
o620: 14 18 04 78 OO TF I 7E ES 63 ES B6 O1 85 50 18 oe ee a eee 
0030: 44 34 3c 67 OO 00 Boo o0 00 00 OO OS G2 EB ES D4¢cq..f......beé 


Remote Terminal Protocol (TELNET) 


Data 


Data/Fcs 
Data/Padding [5 bytes] 
(o) Hex ; 
gogog: 00 50 73 6€ 31 F4 OO CO 4F 27 20 CF O8 OO 45 OO -Ps110.40' Ç.. E, 
0010: 00 29 23 AD 40 00 80 06 OO OO OA OA 14 20 OA DA Ms en eane ak 
(0020: 14 18 O4 78 OO 17 DC FE E8 B4 ES Bë O1 85 50 18 vee Ue ÈN Ph 
0030: 44 34 3¢ 67 oO} oo Woo 00 00 00 OO 1A BC AD 26 EEA: Be 


Remote Terminal Protocol (TELNET) 

Data 
Data/Fcs 

‘Data/Padding [S bytes] 


(c) Hex 
(0000; | oo 50 73 6C 31 F4 00 CO 4F 27 20 C7 O08 00 45 
0010; 00 29 23 AE 40 00 g0 06 OO 00 OA OA 14 70 OA 
o020: 14168 O4 76 Ù + pG 
0030: 44 34 3 7 


1 
Stee eee as 


Lr L | ES BS EG E lL & j 18 ay Je eo 
Oo Woo oO 00 00 OO +45 68 SE D9 D4<g..§.....EnAU 


Remote Terminal Protocol (TELHET) 


‘Data | 
Data/Fcs 
Data/Padding [5 bytes] 

(d) Hex ——— | = 
| Oi s oO 50 73 6C 31 F4 OO CO 4F 27 20 CF Of OO 45 OO .Ps5110.A0' ©..E. 
ooi10: O60 293 23 Af 40 00 80 o¢€ 60 00 OA OA lä 270 G6 Of ae Bees. ace 
oo20% 14 18 04 78 O00 17 DE 7E ES Be E8 Bë 01 85 50 18 seeks s Ue jét.. FP. 
0030: 44 34 3¢ 7 OO OO Boo oo OO OO OO FE EF D2 C2 D4<g..9.....pidA 





= Remote Terminal Protocol TELNET) — = 
Data 


— Bata/Fecs 











‘Data/Padding ‘ts bytes] 








0000; 00 50 73 6C 31 F4 0O CO 4F 27 20 CF O8 00O 45 00 -P5110.A0' oe E 
0010: 00 29 223 BO 40 00 80 06 OO OO OA OA 14 20 GA OA o OE cee 
oo2o% 14 18 O4 78 OO 17 De 7E E& BF ES Be 1 #3 SO 18 seco T 
0030: 43 oo ğü 00 00 00 00 DE ¢3 43 BO Ddeg. A.. PEC 
Ara Pe 

Remote Terminal Protocol [TELNET] 
Data <00 <A 


Data 








(f) 





O00: | oO 33 oo üü FF üğ 
O0z0: | l4 20 0 L 04 78 ES Bo 
0030: OF FB 3 15 OOo A0 OD OA 
0040: | DC 42 FE 


go00: | 00 CO 4F 27 20 C7 00 50 
L Il 





FIGURE 10-17 The captured data packets showing the password “Chile.” 


The fact is that many applications such as telnet are not secure. The data is dis- 
played in plain text, and an attacker can easily see the contents of network traffic. This 
is why unsecure applications, such as telnet, are no longer recommended and in fact 
should be avoided if possible. Remember, an attacker does not have to be someone 
from the outside—many times the biggest threat is from within the organization. 
What can be done to protect the contents of data packets? The use of switches instead 
of hubs helps to isolate data traffic and makes “eavesdropping” on network data traf- 
fic a little more difficult. Even with switches, packet contents are still viewable. There 
are many software applications available that enable data transfers to be encrypted. 
There is an encrypted version of telnet called SSH (secure shell). SSH encrypts the 
data packets and provides secure communications over an unsecured network channel. 
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SUMMARY 


This chapter has presented a short overview of network security. The role of the net- 
work administrator is not only to design, assemble, and maintain a good network, but 
also to protect the network and its users from both external and internal threats. This 
chapter has introduced some of the concepts critical to network security. The reader 
should understand the following concepts: 


e The various ways an attacker can gain control of a network 

e How denial of service attacks are initiated and how they can be prevented 
e How firewalls work and why they are important for protecting a network 
e The issues of unsecured data packets 


QUESTIONS AND PROBLEMS 


Section 10-1 


1. List six ways an attacker gains access to a network. 
2. Describe a way social engineering can be used by an attacker to gain control of 
a network. 


Section 10-2 


Describe how social engineering attacks can be avoided. 

What is a dictionary attack? 

Can password cracking be prevented? How? 

How does the use of a networking switch minimize problems with packet sniff- 
ing ina LAN? 

Describe the concept of software vulnerabilities. 

What is a buffer overflow? 

List two ways to prevent vulnerable software attacks. 

What are simple ways to minimize or prevent viruses? 

What is the purpose of WPA? 


A 





S p 


p jd 


Section 10-3 


12. What is a denial of service attack? 

13. Describe a SYN attack. 

14. Cisco routers use what command to block broadcasts to a subnet? 
15. Define a directed broadcast. 

16. What is the best way to keep from contributing to DDoS attacks? 


Section 10-4 


17. What is the purpose of a firewall? 
18. Why is a stateful firewall important? 
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19. What is the router command for setting an access list 100 to block SNMP UDP 
packets from any source to any destination? 

20. What command should be added to the end of an access list 150 to allow other 
data packets to enter and exit the router? 

21. An extended IP access list 130 is to be applied to a router’s SerialO interface. 
The list is to be applied to inbound data packets. What command should be en- 
tered from the router’s (config-if)# prompt? 

22. Modify the command for Problem 21 so that the access list is applied to out- 
bound data packets. 

23. What command is used to view the number of times an access list has been 
matched? 

24. It has been determined that a computer with an IP address of 192.168.8.4 is 
flooding the network with ICMP packets. Create an extended access list to stop 
the flood. 

25. Apply the access list created in problem 24 to the inbound data traffic on the 
router’s Seriall interface. 


Section 10-5 


26. What two features of a data packet does an intrusion box examine? 
27. Describe a situation that would trigger an intrusion box alarm. 
28. What are some of the issues in the use of an intrusion box? 


Section 10-6 


29. What are the security issues in the use of telnet? 
30. How can a telnet session be made secure? 


Critical Thinking 


31. Your network is experiencing an excessive amount of pings to your network 
server. The pings are from outside the network. Someone suggests that you set 
an access list to block ICMP packets coming into the network. How would you 
respond? 

32. A Web server has been set up for use internal to a network (an intranet server). 
No outside users should be able to access the server. Describe how you would 
protect the server using an access list. 
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CHAPTER OUTLINE 


11-1 Introduction 


11-2 The IEEE 802.11 Wireless LAN 
Standard 


11-3 802.11 Wireless Networking 
11-4 Bluetooth, WiMAX, and RFID 


OBJECTIVES 


e Define the features of the 802.11 wireless 
LAN standard 

e Understand the components of the wireless 
LAN 

e Explore how wireless LANs are configured 


KEY TERMS 
WLAN pseudorandom 
Basic Service Set (BSS) hopping sequence 
ad hoc OFDM 
access point U-NII 
transceiver MIMO 
Extended Service Set Wi-Fi 
(ESS) SSID 
hand-off site survey 
roaming inquiry procedure 
CSMA/CA paging procedure 
DSSS piconet 
ISM pairing 
FHSS Passkey 


11-5 Securing Wireless LANs 

11-6 Configuring a Point-to-Multipoint 
Wireless LAN: A Case Study 

Summary 


Questions and Problems 


Examine how site surveys are done for wire- 
less LANs 

Investigate the issues of securing a wireless 
LAN 

Explore how to configure a point-to-multi- 
point wireless LAN 


WiMAX 
BWA 
NLOS 
last mile 


Radio Frequency 
Identification (RFID) 


backscatter 
Slotted Aloha 
beacon 

WPA 

EAP 
RADIUS 
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11-1 INTRODUCTION 


WLAN This chapter examines the features and technologies used in the wireless local area 

Wireless local area network network (WLAN). Wireless networking is an extension of computer networks into 
the RF (radio frequency) world. The WLAN provides increased flexibility and mo- 
bility for connecting to a network. A properly designed WLAN for a building pro- 
vides mobile access for a user from virtually any location in the building. The user 
doesn’t have to look for a connection to plug into; also, the expense of pulling cables 
and installing wall plates required for wired networks can be avoided. However, a net- 
work administrator must carefully plan the wireless LAN installation and have a good 
understanding of the issues of using WLAN technologies to ensure the installation of 
a reliable and secure network. 

This chapter addresses the basic issues of incorporating WLAN technologies 
into a network. The fundamentals of the IEEE 802.11 wireless LAN standard are ex- 
amined in section 11-2. This includes an overview of wireless LAN concepts and ter- 
minology, frequency allocations, and spread spectrum communication. The 
applications of wireless LANs are presented in section 11-3. This includes a look at 
different types of wireless LAN configurations, such as point-to-point and point-to- 
multipoint. Other wireless networking technologies are examined in section 11-4. 
This section looks at Bluetooth, WiMAX, and RFID. Anytime a signal is transmitted 
over the air or even through a cable, there is some chance that the signal can be in- 
tercepted. Transmitting data over a wireless network introduces new security issues. 
Section 11-5 examines the basic issues of securing WLAN communications. The last 
section (11-6) presents an example of configuring a wireless LAN to provide access 
for users in a metropolitan area. 


11-2 THE IEEE 802.11 WIRELESS LAN 
STANDARD 


A typical computer network uses twisted-pair and fiber optic cable to interconnect 
LANs. Another media competing for use in higher data-rate LANs is wireless, based 
on the IEEE 802.11 wireless standard. The advantages of wireless include 


e User mobility in the workplace 
e A cost-effective networking media for use in areas that are difficult or too costly 
to wire 


The concept of user mobility in the workplace opens the door to many oppor- 
tunities to provide more flexibility. Workers can potentially access the network or 
their telephones (via IP telephony) from virtually any location within the workplace. 
Accessing information from the network is as easy as if the information were on a 
disk. 

The benefits of wireless networks in the workplace are numerous. To provide 
wireless connectivity, the network administrator must be sure the network services 
are reliable and secure. Providing reliable network services means the administrator 
must have a good understanding of wireless LAN configurations and technologies. 
This and the following sections examine the fundamentals of wireless networking; 
the 802.11 standard and its family, 802.11a, 802.11b, and 802.11g and 802.11n; and 
how WLANS are configured. 
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The IEEE 802.11 wireless LAN standard defines the physical (PHY) layer, the 
medium access control (MAC) layer, and the MAC management protocols and ser- 
vices. 

The PHY (physical) layer defines 


e The method of transmitting the data, which may be either RF or infrared (al- 
though infrared is rarely used) 


The MAC (media access control) layer defines 


e The reliability of the data service 
e Access control to the shared wireless medium 
e Protecting the privacy of the transmitted data 


The wireless management protocols and services are 
e Authentication, association, data delivery, and privacy 


The fundamental topology of the WLAN is the Basic Service Set (BSS). This Basic Service Set (BSS) 
is also called the independent Basic Service Set, or ad hoc network. An example of Term used to describe an 
an ad hoc network is provided in Figure 11-1. In this network, the wireless clients independent network 
(stations) communicate directly with each other. This means the clients have recog- Ad Hoc 
nized the other stations in the WLAN and have established a wireless data link. 

Another term used to 


describe an independent 
network 





FIGURE 11-1 An example of the independent Basic Service Set or “ad hoc” network. 


The performance of the Basic Service Set can be improved by including an ac- Access Point 
cess point. The access point is a transmit/receive unit (transceiver) that intercon- A transceiver used to 
nects data from the wireless LAN to the wired network. Additionally, the access point interconnect a wireless and a 
provides 802.11 MAC layer functions and supports bridge protocols. The access wired LAN 
point typically uses an RJ-45 jack for connecting to the wired network. If an access — Transceiver 
point is being used, users establish a wireless communications link through it to A transmit /receive unit 
communicate with other users in the WLAN or the wired network, as shown in 
Figure 11-2. 
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PC-E 


Wired LAN 





PC-B 


FIGURE 11-2 Adding an access point to the Basic Service Set. 


If data is being sent from PC-A to PC-D, the data is first sent to the access point 
and then relayed to PC-D. Data sent from a wireless client to a client in the wired 
LAN also passes through the access point. The users (clients) in the wireless LAN 
can communicate with other members of the network as long as a link is established 
with the access point. For example, data traffic from PC-A to PC-E will first pass 
through the access point and then to PC-E in the wired LAN. 


Extended Service Set The problem with the Basic Service Set is that mobile users can travel outside 
(ESS) the radio range of a station’s wireless link with one access point. One solution is to 
The use of multiple access add multiple access points to the network. Multiple access points extend the range of 
points to extend user mobility of a wireless client in the LAN. This arrangement is called an Extended 
mobility Service Set (ESS). An example is provided in Figure 11-3. The mobile computer will 
Hand-off establish an authorized connection with the access point that has the strongest signal 
When the user's computer level (for example, AP-1). As the user moves, the signal strength of the signal from 
establishes an association AP-1 will decrease. At some point, the signal strength from AP-2 will exceed AP-1, 
with another access point and the wireless bridge will establish a new connection with AP-2. This is called a 
hand-off. This is an automatic process for the wireless client adapter in 802.11, and 
Roaming the term used to describe this is roaming. 
The term used to describe a Network access in 802.11 uses a technique called carrier sense multiple ac- 
users’ ability to maintain cess/collision avoidance (CSMA/CA). In CSMA/CA, the client station listens for 


network connectivity as they 


other users of the wireless network. If the channel is quiet (no data transmission), the 
move through the workplace 


client station may transmit. If the channel is busy, the station(s) must wait until trans- 


CSMA/CA mission stops. Each client station uses a unique random back-off time. This technique 
Carrier sense multiple prevents client stations from trying to gain access to the wireless channel as soon as 
access/collision avoidance it becomes quiet. There are currently four physical layer technologies being used in 


802.11 wireless networking. These are direct sequence spread spectrum (DSSS), fre- 
quency hopping spread spectrum (FHSS), infrared, and orthogonal frequency divi- 
sion multiplexing (OFDM). DSSS is used in 802.11b/g/n wireless networks, and 
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OFDM is used in 802.1 1a, 802.1 1g, and 802.1 1n. Note that 802.11g/n use both DSSS 
and OFDM modulation. 


Laptop 
Computer 








FIGURE 11-3 An example of an Extended Service Set used for increased user mobility. 


802.11 DSSS implements 14 channels (each consuming 22 MHz) over ap- 
proximately 90 MHz of RF spectrum in the 2.4 GHz ISM (industrial, scientific, and 
medical) band. The frequency channels used in North America are listed in Table 
11-1. An example of the frequency spectrum for three-channel DSSS is shown in Fig- 
ure | 1-4. 


TABLE 11-41 North American DSSS Channels 


Channel Number Frequency (GHz) 


2.412 
2.417 
2.422 
2.421 
2.432 
2.437 
2.442 
2.441 
2.452 
2.457 
2.402 


O CON DU KR WW PD PR 


e e 
e © 


In frequency hopping spread spectrum (FHSS), the transmit signal frequency 
changes based on a pseudorandom sequence. Pseudorandom means the sequence 
appears to be random but in fact does repeat, typically after some lengthy period of 
time. FHSS uses 79 channels (each 1 MHz wide) in the ISM 2.4 GHz band. FHSS re- 
quires that the transmitting and receiving units know the hopping sequence (the or- 
der of frequency changes) so that a communication link can be established and 
synchronized. FHSS data rates are typically 1 and 2 Mbps. FHSS is not commonly 
used anymore for wireless LANs. It’s still part of the standard, but very few (if any) 
FHSS wireless LAN products are sold. 


Section 11-2 


DSSS 
Direct sequence spread 
spectrum 


ISM 
Industrial, scientific, and 
medical 


FHSS 
Frequency hopping spread 
spectrum 


Pseudorandom 

The number sequence 
appears random but actually 
repeats 


Hopping Sequence 
The order of frequency 
changes 
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2.412 2.437 2462 GHZ 
CH1 CH6 CH 11 


FIGURE 11-4 An example of the three channels in the DSSS spectrum. 


The maximum transmit power of 802.11b wireless devices is 1000 mW; how- 
ever, the nominal transmit power level is 100 mW. The 2.4 GHz frequency range used 
by 802.11b/g is shared by many technologies, including Bluetooth, cordless tele- 
phones, and microwave ovens. 

LANs emit significant RF noise in the 2.4 GHz range that can affect wireless 
data. A significant improvement in wireless performance is available with the IEEE 
802.1 1a standards. The 802.11a equipment operates in the 5 GHz range and provides 
significant improvement over 802.11b with respect to RF interference. 


OFDM The 802.1la standard uses a technique called orthogonal frequency division 
Orthogonal frequency multiplexing (OFDM) to transport the data over 12 possible channels in the U-NII 
division multiplexing (Unlicensed National Information Infrastructure). U-NII was set aside by the FCC to 


support short-range, high-speed wireless data communications. Table 11-2 lists the 
operating frequencies for 802.lla. Table 11-3 lists the transmit power levels for 
802.1 1a. 


U-NII 
Unlicensed National 
Information Infrastructure 


TABLE 11-2 IEEE 802.11a Channels and Operating Frequencies 


Channel Center Frequency (GHz) 


36 5.180 

40 5.20 Lower Band 
44 5.22 

48 5.24 

52 5.26 

56 5.28 Middle Band 
60 5.30 

64 532 

149 5.745 

153 5.765 Upper Band 
157 5.785 

161 5.805 


TABLE 11-3 Maximum Transmit Power Levels for 802.11a with a 6dBi 
Antenna Gain 


Band Power Level 
Lower 40 mW 
Middle 200 mW 
Upper 800 mW 
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an 


IEEE 802.1 1a equipment is not compatible with 802.11b, 802.11g, or 802.1 1n. 
The good aspect of this is that 802.1 1a equipment will not interfere with 802.11b, g, 
or n; therefore, 802.1la and 802.11b/g/n links can run next to each other without 
causing any interference. Figure 11-5 illustrates an example of the two links operat- 


a 
| ((([-=--mans---})) : 


FIGURE 11-5 An example of an 802.11a installation and an 802.11b link running 
alongside each other. 


The downside of 802.1 1a is the increased cost of the equipment and increased 
power consumption because of the OFDM technology. This is of particular concern 
with mobile users because of the effect it can have on battery life. However, the max- 
imum usable distance (RF range) for 802.1 1a is about the same or even greater than 
that of 802.1 1b/g/n. 
Another IEEE 802.11 wireless standard is IEEE 802.11g. The 802.11g stan- 
dard supports the higher data transmission rates of 54 Mbps but operates in the same 
2.4 GHz range as 802.1 1b. The 802.11g equipment is also backward compatible with 
802.11b equipment. This means that 802.11b wireless clients will be able to com- 
municate with the 802.11g access points, and the 802.11g wireless client equipment 
will communicate with the 802.11b access points. 
The obvious advantage of this is that companies with an existing 802.11b wire- 
less network will be able to migrate to the higher data rates provided by 802.11g with- 
out having to sacrifice network compatibility. In fact, new wireless equipment 
support both the 2.4 GHz and 5 GHz standards, giving it the flexibility of high speed, 
compatibility, and noninterference. 
Another entry into wireless networks is the 802.1 1n. This wireless technology MIMO 
can operate in the same ISM frequency as 802.11b/g (2.4GHz) and can also operate A space-division multiplexing 
in the 5 GHz band. A significant improvement with 802.11n is MIMO (Multiple In- technique where the data 
put Multiple Output). MIMO uses a technique called space-division multiplexing, stream is split into multiple 
where the data stream is split into multiple parts called spatial streams. The different Parts called spatial streams 
spatial streams are transmitted using separate antennas. With MIMO, doubling the 
spatial streams doubles the effective data rate. The downside of this is there can be 
increased power consumption. The 802.11n specification includes a MIMO power- 
save mode. With this, 802.11n only uses multiple data paths when faster data trans- 
mission is required—thus saving power. 
Table 11-4 lists the 802.11n frequency bands. This table shows frequencies in 
both the 2.4 GHz and 5 GHz range. The frequencies being used in the 5 GHz band 
are the same as those used in 802.11a, and note that there is the possibility of using 
both 20MHz and 40MHz channels. 
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TABLE 11-4 The 802.11n Frequency Bands 


Independent Possible 

Frequency Band (GHz) 20 MHz Channels 40 Mhz Channels 

2.40-2.485 3 1 

5.15-5.25 4 2 

5.25-5.35 4 2 

5.47-5.75 10 5 

5.75-5.85 4 2 
Wi-Fi Wireless networks also go by the name Wi-Fi, which is the abbreviated name 
Wi-Fi Alliance—an for the Wi-Fi Alliance (Wi-Fi stands for wireless fidelity). The Wi-Fi Alliance is an 
organization that tests and organization whose function is to test and certify wireless equipment for compliance 
certifies wireless equipment with the 802.11x standards, the group of wireless standards developed under the 
for compliance with the IEEE 802.11 standard. The following list provides a summary of the most common 


802.11x standards wireless standards: 


e 802.1 la (Wireless-A): This standard can provide data transfer rates up to 54 
Mbps and an operating range up to 75 feet. It operates at 5 GHz (Modulation— 
OFDM) 

e 802.11b (Wireless-B): This standard can provide data transfer rates up to 11 
Mbps with ranges of 100 to 150 feet. It operates at 2.4 GHz. (Modulation— 
DSSS) 

e 802.11g (Wireless-G): This standard can provide data transfer rates up to 54 
Mbps up to 150 feet. It operates at 2.4 GHz. (Modulation—DSSS or OFDM) 

e $02.11n (Wireless-N): This is the next generation of high-speed wireless con- 
nectivity promising data transfer rates over 200+ Mbps. It operates at 2.4 GHz 
and 5 GHz. (Modulation—DSSS or OFDM) 

e $02.11i: This standard for wireless LANs (WLANs) provides improved data 
encryption for networks that use the 802.1 1a, 802.11b, and 802.11g standards. 

e 802.11r: This standard is designed to speed handoffs between access points or 
cells in a wireless LAN. This standard is a critical addition to 802.11 WLANs 
if voice traffic 1s to become widely deployed. 


11-3 802.11 WIRELESS NETWORKING 


A wireless LAN can be configured in many ways to meet the needs of an organiza- 
tion. Figure 11-6 provides an example of a basic 802.11b/g/n WLAN configuration. 
Each PC is outfitted with a wireless LAN adapter card. The PC cards come in many 
styles, such as PCI, ISA, or PCMCIA, and some units are external to the computer. 
The wireless adapter (wireless LAN adapter) is the device that connects the client to 
the wireless medium. The medium is typically a radio wave channel in the 2.4 GHz 
ISM band. The wireless medium can also be infrared, although this is not used very 
often. The following services are provided by the wireless LAN adapter: 


e Delivery of the data 
e Authentication 
e Privacy 
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RJ-45 CAT6/5e 
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FIGURE 11-6 The setup for a basic wireless LAN. 








The connection to a wired LAN is provided by a wireless access point, which 
provides a bridge between the wireless LAN and the wired network. A physical ca- 
ble connection (typically CAT6/Se) ties the access point to the wired network’s 
switch or hub (typically Ethernet). 
For example, computer PC-A shown in Figure 11-6 sends a data packet to PC- 
D, a destination in the wired LAN. PC-A first sends a data packet over the wireless 
link. The access point recognizes the sender of the data packet as a host in the wire- 
less LAN-X and allows the wireless data to enter the access point. At this time, the 
data is sent out the physical Ethernet connection to the wired LAN. The data packet 
is then delivered to PC-D in the wired LAN. 
A question should come up at this point: “How does the access point know that SSID 
the wireless data packet is being sent from a client in the wireless LAN?” Service set identifier 
The answer is the 802.11 wireless LAN devices use an SSID to identify what 
wireless data traffic is allowed to connect to the network. The SSID is the wireless 
service set identifier, basically a password that enables the client to join the wireless 
network. 
The access point uses the SSID to determine whether the client is to become a 
member of the wireless network. The term association is used to describe that a wire- 
less connection has been obtained. 
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Another common question is, “Why does the access point have two antennas?” 
The answer is the two antennas implement what is called “spatial diversity.” This an- 
tenna arrangement improves received signal gain and performance. 

Figure 11-7 provides an example of the information displayed on the wireless 
adapter’s console port when an association is made. The text indicates that a connec- 
tion has been made to a parent (access point) whose MAC address is 00-40-96-25- 
9d-14. The text indicates this MAC address has been “added”? to the list of 
associations. This type of information is typically available via the wireless manage- 
ment software that typically comes with the wireless PC or PCMCIA adapter. 


Ethernet Address (BSSID hamel] Type / Status L Noise 


a 00:40:96:25:9D:14 6 Roaming / Associated 9 













Number of available access points: 1 


Been | He | 


FIGURE 11-7 An example of the information displayed when an association is made by a 
client with an access point. 


Access points use the association to build a table of users (clients) on the wire- 
less network. Figure 11-8 provides an example of an association table. The associa- 
tion table lists the MAC addresses for each networking device connected to the 
wireless network. The access point then uses this table to forward data packets be- 
tween the access point and the wireless network. The wireless client adapter will also 
notify the user 1f the client has lost an association with the access point. An example 
of this also is provided in Figure 11-8. 

A wireless bridge is a popular choice for connecting LANs (running similar 
network protocols) together even if the LANs are miles apart. Examples are provided 
in Figure 11-9 (a) and (b). Figure 11-9 (a) shows a point-to-point wireless bridge. 
Each building shown in Figure 11-9 (a) has a connection from the wireless bridge to 
the building’s LAN, as shown in Figure 11-10. The wireless bridge then connects to 
an antenna placed on the roof, and there must be a clear (line-of-sight) transmission 
path between the two buildings, or there will be signal attenuation (loss) or possible 
signal disruption. Antenna selection is also critical when configuring the connection. 
This issue is addressed in section 11-5. The antenna must be selected so that the sig- 
nal strength at the receiving site is sufficient to meet the required received signal level. 
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Connected 0:07:31 Auto detect 9600 8-N-1 





FIGURE 11-8 An example of a “lost” association. 
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Figure 11-9 (b) shows how a wireless bridge can be used to connect multiple 
remote sites to the main transmitting facility. Each building uses a bridge setup sim- 
ilar to that shown in Figure 11-10. The bridge connects to its respective LAN. In this 
case, Bld-A uses an antenna that has a wide coverage area (radiation pattern). The key 
objective with antenna selection is that the antenna must provide coverage for all re- 
ceiving sites (in this case, Bld-B and Bld-C). 
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FIGURE 11-9 Examples of (a) point-to-point and (b) point-to-multipoint wireless bridge 
configurations. 


Wireless LANs have a maximum distance the signal can be transmitted. This 
is a critical issue inside buildings when user mobility is required. Many obstacles can 
reflect and attenuate the signal, causing reception to suffer. Also the signal level for 
mobile users is hampered by the increased distance from the access point. Distance 
is also a critical issue in outdoor point-to-multipoint wireless networks. 
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FIGURE 11-10 The wireless bridge connection to the wired network inside the building. 


A solution is to place multiple wireless access points within the facility, as 
shown in Figure 11-11. Mobile clients will be able to maintain a connection as they 
travel through the workplace because the wireless client will automatically select the 
access point that provides the strongest signal level. The access points can be 
arranged so that overlapping coverage of the workplace is provided, thus enabling 
seamless roaming for the client. The signal coverage is shown in the shape of circles 
in Figure 11-11. In actual practice, the radiation patterns are highly irregular due to 
reflections of the transmitted signal. 


Site Survey It is important to verify that sufficient RF signal level is available for the users 
Performed to determine the in the WLAN. This is best accomplished by performing a site survey. Inside a build- 
best location(s) for placing ing, a site survey is performed to determine the best location(s) for placing the access 
the access point(s) to point(s) for providing maximum RF coverage for the wireless clients. Site surveys are 


provide maximum RF 
coverage for the wireless 
clients 


also done with outside installations to determine the coverage area. 
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FIGURE 11-11 An example of configuring multiple access points to extend the range for 
wireless connectivity. 


A site survey for indoor and outdoor installations should obtain the following 
key information: 


Indoor 


e Electrical power 

Wired network connection point(s) 
Access point placement 

RF coverage—user mobility 
Bandwidth supported 

identify any significant RF interference 


Outdoor 


e Electrical power (base access point) 
e Connection back to the home network 


e Antenna selection 

e Bandwidth supported 

e RF coverage 

e Identify any significant RF interference 


For example, a site survey was conducted to determine access point placement 
to provide wireless network connectivity for a building. The objective was to provide 
mobile client access throughout the building. The building already had two wired 
connections available for placing an access point. Figure 11-12 provides the floor 
plan for the building. 





> 


Ethernet CAT5e 


FIGURE 11-12 The floor plan of the building being surveyed for a wireless LAN. 


The available wired network connections are indicated in the drawing. The site 
survey began with placing an access point at position 1. A wireless mobile client was 
used to check the signal throughout the building. The wireless management software 
that came with the WLAN adapter was used to gather the test results. 

The first measurement was taken at point A as shown in Figure 11-13. Notice 
that the data speed is 11 Mbps. This will change if the signal level decreases signifi- 
cantly. The wireless PCMCIA card also comes with a way to check the signal statis- 
tics as illustrated in Figure 11-14. This figure provides a plot of the signal quality, the 
missed access point (AP) beacons, transmit retries, the signal strength, and the trans- 
mit rate. 
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FIGURE 11-13 The RF signal level observed at point A. 
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FIGURE 11-14 The signal statistics from point A. 


The next observation was made at point B. A signal level of “Good” and a trans- 
mit rate of 11 Mbps was observed. The signal has decreased somewhat, but the 
“Good” indicates that a connection is still available. Figure 11-15 shows the obser- 
vation made at point B. The signal level drops to “Fair” at point C as shown in Fig- 
ure 11-16. 
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The mobile client was moved to point D in the building, and a signal quality of 
“Out of range” was observed. This is also called a loss of association with the access 
point. Figure 11-17 shows the observed signal level. 
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FIGURE 11-15 The signal quality of “Good” at point B. 
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FIGURE 11-16 The drop in the signal quality to “Fair” at point C. 
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FIGURE 11-17 The “Out of range” measurement for point D. 


The site survey shows that one access point placed at point 1 in the building is 
not sufficient to cover the building’s floor plan. The survey shows that the additional 
cost of another access point is easily justified for providing full building wireless 
LAN coverage. The building has two wired network connections available for plac- 
ing an access point (points 1 and 2). It was decided to place another access point at 
point 2. The site survey was repeated, and it showed that “Excellent” signal strength 
was obtained throughout the building. In some cases, a range extender can be used to 
provide additional wireless coverage. This device basically extends the reach of the 
wireless network. 


11-4 BLUETOOTH, WIMAX, AND RFID 


This section looks at three different wireless technologies: Bluetooth, WiMAX, and 
RFID. Each of these technologies plays important roles in the wireless networks. The 
sections that follow examine each of these wireless technologies, including a look at 
configuration and examples of the hardware being used. 


Bluetooth 


This section examines another wireless technology called Bluetooth, based on the 
802.15 standard. Bluetooth was developed to replace the cable connecting computers, 
mobile phones, handheld devices, portable computers, and fixed electronic devices. 
The information normally carried by a cable is transmitted over the 2.4 GHz ISM fre- 
quency band, which is the same frequency band used by 802.1 1b/g/n. There are three 
output power classes for Bluetooth. Table 11-5 lists the maximum output power and 
the operating distance for each class. 
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Inquiry Procedure 

Used by Bluetooth to 
discover other Bluetooth 
devices or to allow itself to 
be discovered 


Paging Procedure 
Used to establish and 
synchronize a connection 
between two Bluetooth 
devices 


Piconet 
An ad hoc network of up to 
eight Bluetooth devices 


Pairing 
When a Bluetooth device is 


set up to connect to another 


Bluetooth device. 
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TABLE 11-5 Bluetooth Output Power Classes 


Power Class Maximum Output Power Operating Distance 


1 20 dBm ~ 100 m 
2 4 dBm ~ 10m 
3 0 dBm ~1m 


When a Bluetooth device is enabled, it uses an inquiry procedure to determine 
whether any other Bluetooth devices are available. This procedure is also used to al- 
low itself to be discovered. 

If a Bluetooth device is discovered, it sends an inquiry reply back to the Blue- 
tooth device initiating the inquiry. Next, the Bluetooth devices enter the paging pro- 
cedure. The paging procedure is used to establish and synchronize a connection 
between two Bluetooth devices. When the procedure for establishing the connection 
has been completed, the Bluetooth devices will have established a piconet. A piconet 
is an ad hoc network of up to eight Bluetooth devices such as a computer, mouse, 
headset, earpiece, and so on. In a piconet, one Bluetooth device (the master) is re- 
sponsible for providing the synchronization clock reference. All other Bluetooth de- 
vices are called slaves. 

The following is an example of setting up a Bluetooth network linking a Mac 
OS X computer to another Bluetooth enabled device. To enable Bluetooth on the Mac 
OS X, click Apple—Systems Preferences. Under hardware, select Bluetooth—Set- 
tings, and the window shown in Figure 11-18 is opened. Click the Bluetooth Power 
button to turn on Bluetooth. Click Discoverable. This enables other Bluetooth de- 
vices to find you. 
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f Settings File Exchange Devices | 


Muetooth Power: On 
Bluetooth Device Name: hollymac 
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This wil allow other Blectoot® devices to fied your computer, W this is disabled, 
other devices will stii be able to connect to your computer. 


L Require Authentication 


l l Use Encryption 
This wil require Bluetooth devices to authenticate before making connections to 
your Computer. This will also secure a data sent ower Bluetooth. 


| Support Non-Conforming Phones 
This provides beter connections with older Bluetooth phones. 


|) Open Bluetooth Setup Assistant at startup when mo input device is present 
M Show Bluetooth status in the menu bar 


FIGURE 11-18 The window for configuring the Bluetooth settings. 


In the next step you will select the device with which you will be establishing 
a Bluetooth connection. Select Devices—Set-up New Device—Turn Bluetooth On 
if it is not already on. You will next be guided using the Bluetooth Setup Assistant 
and will be asked to select the device type. You have the choice of connecting to a 
mouse, keyboard, mobile phone, printer, or other device. In this case, Other Device 
is selected. This choice is selected when connecting to another computer. The Blue- 
tooth Device Setup will search for another Bluetooth device. There will be a notifi- 
cation on the screen alerting you when another Bluetooth device is found. Select 
continue if this is the device you want to connect to. It is called pairing when another 


Bluetooth device is set up to connect to another Bluetooth device. You may be asked 
for a Passkey. The Passkey is used in Bluetooth Security to limit outsider access to 
the pairing. Only people with the Passkey will be able to pair with your Bluetooth 
device. 

At this point, you are now able to transfer files between the paired devices. This 
requires that the file exchange settings for the device have been set to allows files to 
come in. An example of the setup for the file transfer is shown in Figure 11-19. 
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FIGURE 11-19 The window showing the settings for a file transfer. 


The screen shown in Figure 11-20 shows an incoming text file. The File Trans- 
fer menu enables the user to select where received files are saved. In this case, the in- 
coming files are being saved to the desktop. 
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Kind: Microsoft Word document 
Size: 23.5 KB 


FIGURE 11-20 The window showing that a text file is coming in from another Bluetooth 


device. 


This example has demonstrated setting up Bluetooth on a Mac OS X. The steps 
for setting up Bluetooth on a Windows XP or Vista computer or even a Blackberry 
differ slightly, but the basic steps are the same. The following are the basic steps you 
need to complete to pair with another Bluetooth device: 


1. Enable the Bluetooth radio. 
2. Enable Discoverability (this enables other Bluetooth devices to find you). 
3. Select the device for pairing. 


Passkey 

Used in Bluetooth Security 
to limit outsider access to 
the pairing 
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WiMAX 

A broadband wireless system 
based on the IEEE 802.16e 
standard 


BWA 
Broadband wireless access 


NLOS 
Non line-of-sight 


Last Mile 

The last part of the 
connection from the 
telecommunications provider 
to the customer 


Radio Frequency 
Identification (RFID) 

A technique that uses radio 
waves to track and identify 
people, animals, objects, and 
shipments 


Backscatter 

Refers to the reflection of 
the radio waves striking the 
RFID tag and reflecting back 
to the transmitter source 
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WiMAX 


WiMAX (Worldwide Interoperability for Microwave Access) is a broadband wire- 
less system that has been developed for use as broadband wireless access (BWA) for 
fixed and mobile stations and can provide a wireless alternative for last mile broad- 
band access in the 2 GHz to 66 GHz frequency range. BWA access for fixed stations 
can be up to 30 miles, whereas mobile BWA access is 3—10 miles. Internationally, the 
WiMAX frequency standard is 3.5 GHz while the United States uses both the unli- 
censed 5.8 GHz and the licensed 2.5 GHz spectrum. There are also investigations 
with adapting WiMAX for use in the 700 MHz frequency range. Information trans- 
mitted at this frequency is less susceptible to signal blockage due to trees. The disad- 
vantage of the lower frequency range is the reduction in the bandwidth. 

WiMAX uses Orthogonal Frequency Division Multiplexing (OFDM) as its sig- 
naling format. This signaling format was selected for the WiMAX standard IEEE 
802.16a standard because of its improved NLOS (non line-of-sight) characteristics 
in the 2 GHz to 11 GHz frequency range. An OFDM system uses multiple frequen- 
cies for transporting the data, which helps minimize multipath interference problems. 
Some frequencies may be experiencing interference problems, but the system can se- 
lect the best frequencies for transporting the data. 

WiMAX also provides flexible channel sizes (for example, 3.5 MHz, 5 MHz, 
and 10 MHz), which provides adaptability to standards for WIMAX worldwide. This 
also helps ensure that the maximum data transfer rate is being supported. For exam- 
ple, the allocated channel bandwidth could be 6 MHz, and the adaptability of the 
WiMAX channel size allows it to adjust to use the entire allocated bandwidth. 

Additionally, the WiMAX (IEEE 802.16e) media access control (MAC) layer 
differs from the IEEE 802.11 Wi-Fi MAC layer in that the WiMAX system has to 
compete only once to gain entry into the network. When a WiMAX unit has gained 
access, it is allocated a time slot by the base station, thereby providing the WiMAX 
with scheduled access to the network. The WiMAX system uses time division multi- 
plexing (TDM) data streams on the downlink and time-division multiple access 
(TDMA) on the uplink and centralized channel management to make sure time-sen- 
sitive data is delivered on time. Additionally, WiMAX operates in a collision-free en- 
vironment, which improves channel throughput. 

WiMAX has a range of up to 31 miles, and it operates in both point-to-point 
and point-to-multipoint configurations. This can be useful in situations where DSL 
or cable network connectivity is not available. WiMAX is also useful for providing 
the last mile connection. The last mile is basically the last part of the connection from 
the telecommunications provider to the customer. The cost of the last mile connec- 
tion can be expensive, which makes a wireless alternative attractive to the customer. 

The 802.16e WiMAX standard holds a lot of promise for use as a mobile air in- 
terface. Another standard, 802.20, is a mobile air interface being developed for con- 
sumer use. This standard plans to support data rates over 1 Mbps, which is 
comparable to DSL and cable connections. Additional 802.20 is being developed to 
support high-speed mobility. In other words, the user could be in a fast car or train 
and still have network connectivity. 


RFID (Radio Frequency Identification) 


Radio Frequency Identification (RFID) is a technique that uses radio waves to 
track and identify people, animal, objects, and shipments. This is done by the princi- 
ple of modulated backscatter. The term “backscatter” is referring to the reflection of 
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the radio waves striking the RFID tag and reflecting back to the transmitter source 
with its stored unique identification information. 
Figure 11-21 illustrates the basic block for an RFID system. 
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FIGURE 11-21 Basic block diagram of an RFID system. 


The RFID system consists of two things: 


e An RFID tag (also called the RF transponder) includes an integrated antenna 
and radio electronics. 

e A reader (also called a transceiver) consists of a transceiver and an antenna. A 
transceiver is the combination of a transmitter and receiver. 


The reader (transceiver) transmits radio waves, which activates (turns on) an 
RFID tag. The tag then transmits modulated data, containing its unique identification 
information stored in the tag, back to the reader. The reader then extracts the data 
stored on the RFID tag. 

The RFID idea dates back to 1948, when the concept of using reflected power 
as ameans of communication was first proposed. The 1970s saw further development 
in RFID technology, in particular, a UHF scheme that incorporates rectification of the 
RF signal for providing power to the tag. Development of RFID technology signifi- 
cantly increased in the 1990s. Applications included toll collection that allowed ve- 
hicles to pass through tollbooths at highway speeds while still being able to record 
data from the tag. 

Today, RFID technology is being used to track inventory shipments for major 
commercial retailers, the transportation industries, and the Department of Defense. 
Additionally, RFID applications are being used in Homeland Security in tracking 
container shipments at border crossings. Additionally, RFID is being incorporated 
into wireless LAN (WLAN) computer networks to keep better track of inventory. 
Wireless technologies are becoming more important for the enterprise. RFID tech- 
nology is being used as a wireless means for asset tracking and as a result is placing 
more importance on its role in the network. The tracking technology is even being ex- 
tended to tracking WiFi devices within the WLAN infrastructure. 

There are three parameters that define an RFID system. These include the 
following: 


e Means of powering the tag 
e Frequency of operation 
e Communications protocol (also called the air interface protocol) 
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Powering the Tag RFID tags are classified in three ways based on how they ob- 
tain their operating power. The three different classifications are passive, semi-active, 
and active. 


e Passive: Power is provided to the tag by rectifying the RF energy, transmitted 
from the reader, that strikes the RF tag antenna. The rectified power level is suf- 
ficient to power the ICs on the tags and also provides sufficient power for the 
tag to transmit a signal back to the reader. Figure 11-22 shows an example of a 
passive RFID tag (also called an inlay). 

The tag inlays include both the RFID chip and the antenna mounted on a sub- 
Strate. 

e Semi-active: The tags use a battery to power the electronics on the tag but use 
the property of backscatter to transmit information back to the reader. 

e Active: Use a battery to power the tag and transmit a signal back to the reader. 
Basically this is a radio transmitter. New active RFID tags are incorporating 
wireless Ethernet, the 802.1 1b—WiFi connectivity. An example is the G2C501 
Active RFID tag from G2 Microsystems shown in Figure 11-23. The power 
consumption of the G2C501 is 10uA in the sleep mode and uses two AA bat- 
teries with an expected lifetime of five years. The G2C501 also works in the 
standard 915 MHz range. The G2C501 also has location capability. This is ac- 
complished by making Receive Signal Strength Indicator (RSSI) measure- 
ments from three separate access points. The three measurements provide 
sufficient information to make a triangulation measurement for use in locating 
the object. 


Antenna 


Integrated Circuit 


<— Substrate 





FIGURE 11-22 Examples of an RFID inlay. 





FIGURE 11-23 The G2C501 Active RFID tag from G2Microsystems (courtesy of 
G2Microsystems). 
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Frequency of Operation The RFID tags must be tuned to the reader’s transmit 
frequency to turn on. RFID systems typically use three frequency bands for opera- 
tion, LF, HF, and UHF as shown in Figure 11-24: 


e Low-frequency (LF) tags typically use frequency-shift keying (FSK) between 
the 125/134 kHz frequencies. The data rates from these tags is low (~12 kbps) 
and they are not appropriate for any applications requiring fast data transfers. 
However, the low-frequency tags are suitable for animal identification, such as 
dairy cattle and other livestock. The RFID tag information 1s typically obtained 
when the livestock are being fed. The read range for low-frequency tags is ap- 
proximately .33 meters. 

e High-frequency (HF) tags operate in the 13.56 MHz industrial band. High- 
frequency tags have been available commercially since 1995. It is known that the 
longer wavelengths of the HF radio signal are less susceptible to absorption by 
water or other liquids. Therefore, these tags are better suited for tagging liquids. 
The read range for high-frequency tags is approximately 1 meter. The short 
read range provides for better defined read ranges. The applications for tags in 
this frequency range include access control, smart cards, and shelf inventory. 

e Ultra-high frequency (UHF) tags work at 860-960 MHz and at 2.4 GHz. The 
data rates for these tags can be from 50—150 kbps and greater. These tags are 
popular for tracking inventory. The read range for passive UHF tags is 10—20 
feet, which make it a better choice for reading pallet tags. However, if an active 
tag is used, a read range up to 100 meters is possible. 


LF HF UHF 
125/134 kHz 13.56 MHz 860 - 960 MHz 
2.4 GHz 


FIGURE 11-24 The frequency bands used by RFID tags. 


Communications (Air Interface) Protocol The air interface protocol adopted Slotted Aloha 

for RFID tags is Slotted Aloha, a network communications protocol technique sim- ^A wireless network 

ilar to the Ethernet protocol. In a Slotted Aloha protocol, the tags are only allowed to communications protocol 
transmit at predetermined times after being energized. This technique reduces the technique similar to the 
chance of data collisions between RFID tag transmissions and allows for the reading pamerice PrOLOCOL 

of up to 1000 tags per second. (Note: This is for high-frequency tags). The operating 

range for RFID tags can be up to 30 meters. This means that multiple tags can be en- 

ergized at the same time, and a possible RF data collision can occur. If a collision oc- 

curs, the tag will transmit again after a random back-off time. The readers transmit 

continuously until there is no tag collision. 


11-5 SECURING WIRELESS LANS 


This section provides an overview of securing 802.11 wireless LANs. The network 
administrator must be aware of the security issues when configuring a wireless LAN. 
The fact is, RF (radio frequencies) will pass through walls, ceilings, and floors of a 
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building even with low signal power. Therefore, the assumption should never be made 
that the wireless data is confined to only the user’s area. The network administrator 
must assume that the wireless data can be received by an unintended user. In other 
words, the use of an unsecured wireless LAN is opening a potential threat to network 
security. 

To address this threat to WLAN security, the network administrator must make 
sure the WLAN is protected by firewalls and intrusion detection (see Chapter 10), and 
most importantly the network administrator must make sure that the wireless security 
features are 


This might seem to be a bold statement, but surprisingly enough, many WLANs 
are placed on a network without turning on available wireless security features. Many 
times the user in the WLAN assumes that no one would break into his or her com- 
puter because nothing important exists on the system. This may be true, but to an at- 
tacker, the user has one very important item, access to the wired network through an 
unsecured client. 


Beacon WLANS use an SSID (service set identifier) to authenticate users, but the prob- 
Used to verify the integrity lem is that the SSID is broadcast in radio link beacons about 10 times per second. In 
of a wireless link WLAN equipment, the beacons are transmitted so that a wireless user can identify 


an access point to connect to. The SSID can be turned off so it isn’t transmitted with 
a beacon, but it is still possible for the SSID to be obtained by packet sniffing. As 
noted previously, packet sniffing is a technique used to scan through unencrypted data 
packets to extract information. In this case, an attacker uses packet sniffing to extract 
the SSID from data packets. Disabling SSID broadcasting will make it so that most 
client devices (such as Windows PCs and laptops) won’t notice that the wireless LAN 
is present. This at least keeps “casual snoopers” off the network. Enterprise-grade ac- 
cess points implement multiple SSIDs, with each configured SSID having its own 
VLAN and wireless configuration. This allows the deployment of a common wire- 
less LAN infrastructure that supports multiple levels of security, which is important 
for some venues such as airports and hospitals (where there are both public and pri- 
vate users). 

IEEE 802.11 supports two ways to authenticate clients: open and sharekey. 
Open authentication basically means that the correct SSID is being used. In sharekey 
authentication, a packet of text is sent by the access point to the client with the in- 
struction to encrypt the text and return it to the access point. This requires that wired 
equivalent privacy (WEP) be turned on. WEP is used to encrypt and decrypt wireless 
data packets. The exchange and the return of the encrypted text verifies that the client 
has the proper WEP key and is authorized to be a member of the wireless network. It 
is important to note that shared key authentication is extremely vulnerable. As a re- 
sult, it’s standard practice to avoid the use of shared key authentication. An example 
of the setting for WEP encryption is provided in Figure 11-25 (a and b). In Figure 
11-25 (a), the user has the WEP options of disabled (No Privacy), 64-bit WEP (Pri- 
vacy), and 128-bit WEP (More Privacy). Figure 11-25 (b) shows the wireless secu- 
rity settings in Windows Vista. There are clearly more options, and these newer 
wireless security settings are discussed next. 

There is some concern that WEP isn’t a strong enough encryption to secure a 
wireless network. There is published information about WEP vulnerabilities, but even 
with this, WEP does provide some basic security and is certainly better than operat- 
ing the network with no security. 
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FIGURE 11-25 An example of setting WEP encryption on a wireless client. 


An improvement with wireless security is provided with WPA and WPA2. WPA 
WPA stands for Wi-Fi Protected Access, and it supports the user authentication pro- Wi-Fi Protected Access 
vided by 802.1x and replaces WEP as the primary way for securing wireless trans- 
fers. WPA2 is an improved version of WPA. The 802.1x standard enhances wireless 
security by incorporating authentication of the user. Cisco Systems uses an 802.1x 
authentication system called LEAP. In Cisco LEAP, the user must enter a password 
to access the network. This means that if the wireless client is being used by an unau- 
thorized user, the password requirement will keep the unauthorized user out of the 
network. 
WPA is considered to be a higher level of security for wireless systems. In the EAP 
802.1x system, a user requests access to the wireless network via an access point. The Extensible Authentication 
next step is for the user to be authenticated. At this point, the user can only send EAP Protocol 
messages. EAP is the Extensible Authentication Protocol and is used in both WAP 


. , j RADIUS 
and WAP2 by the client computer and the access point. The access point sends an Remote Authentication Dial- 
EAP message requesting the user’s identity. The user (client computer) returns the Tn Service 


identity information that is sent by the access point to an authentication server. The 
server will then accept or reject the user’s request to join the network. If the client is 
authorized, the access point will change the user (client’s) state to authorized. A Re- 
mote Authentication Dial-In User Service (RADIUS) service is sometimes used to 
provide authentication. This type of authentication helps prevent unauthorized users 
from connecting to the network. Additionally, this authentication helps to keep au- 
thorized users from connecting to rouge of unauthorized access points. 

Another way to further protect data transmitted over a WLAN is to establish a 
VPN connection (see Chapter 8). In this way, the data is protected from an attacker. 
The following are basic guidelines for wireless security: 


e Make sure the wireless security features are turned on. 
e Use firewalls and intrusion detection on your WLAN. 
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e Improve authentication of the WLAN by incorporating 802.1x features. 

e Consider using third-party end-to-end encryption software to protect the data 
that might be intercepted by an unauthorized user. 

e Whenever possible, use encrypted services such as SSH and Secure FTP. 


The bottom line is that the choice of the level of security will be based on mul- 
tiple factors within the network. For example, what is the cost benefit ratio of in- 
creased security? How will incorporating or not incorporating increased wireless 
security affect users? The network administrator and the overall management will 
have to make the final decision regarding wireless security before it is installed and 
the network becomes operational. 


11-6 CONFIGURING A POINT-TO-MULTIPOINT 
WIRELESS LAN: A CASE STUDY 


This section presents an example of preparing a proposal for providing a point-to- 
multipoint wireless network for a company. The administrators for the company have 
decided that it would be beneficial to provide a wireless network connection for their 
employees back to the company’s network (home network). This example addresses 
the following issues: 


Conducting an initial antenna site survey 

Establishing a link from the home network to the distribution point 
Configuring the multipoint distribution 

Conducting an RF site survey for establishing a baseline signal level for the re- 
mote wireless user 

5. Configuring the remote user’s installation 


ee 


The objective is to establish a point-to-multipoint wireless network that pro- 
vides remote users with a wireless network connection. The remote users are to be at 
fixed locations within the proposed coverage area. A simple terrain profile of the pro- 
posed area is shown in Figure 11-26. The data rate for the wireless connection to re- 
mote users needs to be at least 2 Mbps. 
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FIGURE 11-26 The terrain profile of the area to be supported by the proposed point-to- 
multipoint wireless network. 
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1. Antenna Site Survey 


The proposed antenna site (see Figure 11-26) is on top of a hill approximately 1 kilo- 
meter (km) from the home network. A site survey provides the following information: 


e The site has a tower that can be used to mount the wireless antenna. 

e The site has a small building and available rack space for setting up the wire- 
less networking equipment. 

e There is a clear view of the surrounding area for 6 km in every direction. 

e There is not an available wired network connection back to the home network. 
The decision is made to use the proposed antenna site and set up an 11 Mbps 
wireless link back to the home network. 


2. Establishing a Point-to-Point Wireless Link to the Home 
Network 


The cost is too high to put in a wired connection back to the home network; there- 
fore, it is decided to use a point-to-point 802.11 wireless link for the interconnection. 
This requires that antennas be placed at both the home network and the antenna site. 
A wireless bridge is used at each end of the point-to-point wireless link to intercon- 
nect the networks. The bridge will connect to the wired home network and to the mul- 
tipoint distribution on the antenna site. Also each antenna will be outfitted with 
lightning arrestors to protect the electronics from any possible lightning strikes. Fig- 
ure 11-27 shows the proposed wireless connection. 
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FIGURE 11-27 The proposed point-to-point wireless link from the home network to the 
antenna site. 
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There are many manufacturers of antennas that support wireless networking, 
and there are many types of antenna that can be used. Antenna types from many man- 
ufacturers were investigated for possible use in the interconnection. Three possible 
antennas were selected for the wireless network, as outlined in Table 11-6. 
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TABLE 11-6 Sample of 802.11b Wireless Antennas 


Range in Range in 


Antenna Type Radiation km at km at 

Pattern 2 Mbps 11 Mbps Costs 
A. Omni Omnidirectional 7 2 Moderate 
B. Yagi Directional 12 75 Moderate 
C: Dish Highly directional 38 18 High 


Antenna A has an omnidirectional radiation pattern. This means the antenna 
can receive and transmit signals in a 360-degree pattern. Figure 11-28 (a) shows the 
radiation pattern for an omnidirectional antenna. Antenna A supports a 2 Mbps data 
rate up to 7 km from the antenna and supports an 11 Mbps data rate at a maximum 
distance of 2 km. Table 11-6 also indicates that this antenna has a moderate cost. 

Antenna B is a Yagi antenna with a directional radiation pattern as shown in 
Figure 11-28 (b). The Yagi antenna supports a 2 Mbps data rate for a maximum of 
12 km. 

Antenna C is a “dish” antenna or parabolic reflector. These antennas provide 
extremely high directional gain. In this example, the dish antenna supports 11 Mbps 
up to 18 km away and 2 Mbps up to 38 km away. The cost of the dish antenna can be 
quite high relative to the cost of the Yagi or omnidirectional antenna. 


< ) 


(a) (b) (c) 


FIGURE 11-28 Antenna radiation patterns for (a) omnidirectional, (b) Yagi, and (c) dish 
[parabolic reflector] antenna, and supports 11 Mbps up to 7.5 km from the antenna. The 
cost of the Yagi antenna is comparable to the omnidirectional antenna. 


Antenna B, the directional Yagi, is selected for the point-to-point link. The an- 
tenna meets the distance requirement and also meets the 11 Mbps data rate require- 
ment. Antennas A and C were not selected for the following reasons: 


e Antenna A—the omnidirectional radiation pattern is not appropriate 
e Antenna C—the cost of a high gain dish antenna is not justified for the short 
distance 


3-4. Configuring the Multipoint Distribution/Conducting an RF 
Site Survey 


At this point, an 11 Mbps wireless data link has been established with the home net- 
work. The next task is to configure the antenna site for multipoint distribution. It was 
previously decided that a 2 Mbps link would be adequate for the remote users, based 
on the data rate to be supported for the planned coverage area. 
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The site survey in step 1 showed that there is a clear view of the surrounding 
area for 6 km in each direction. Antenna A (see Table 11-6) provides an omnidirec- 
tional radiation pattern for 7 km. This satisfies the coverage area and 2 Mbps data 
rate. Antenna A is mounted on the antenna site tower, connected to a lightning ar- 
restor and then connected to the output of a wireless bridge. An RF site survey of the 
planned coverage area is next done to verify the signal quality provided by the an- 
tenna selected. Measurements are made from multiple locations within the planned 
coverage area. All remote sites within 4 km of the distribution show a signal strength 
of “Excellent,” as shown in Figure 11-29. 
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FIGURE 11-29 The signal quality of “Excellent” measured for the multipoint distribution. 


The signal quality drops to “Good” at 6 km at all surveyed remote locations ex- 
cept for one area that shows a “Poor.” The measurement for this site is provided in 
Figure 11-30. Apparently the signal is being affected by multipath distortion off a 
small lake area. A fix to this might be to move the antenna to a different height to min- 
imize reflection problems. An antenna at a different height will receive different re- 
flections and possibly less interference. In some cases antenna alignment can be 
changed to decrease the interference. A more costly solution is to add antenna 
“diversity.” Basically this means that multiple antennas are placed on the receiving 
tower, and the best signal is used for the connection. 
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FIGURE 11-30 The signal quality of “Poor” measured at the remote site near the lake. 


5. Configuring the Remote Installations 


The last task is to develop a configuration for the remote users. The antenna for each 
remote user only needs to be able to see the multipoint distribution antenna site. The 
requirements for the remote client are as follows: 


e 2 Mbps data rate connection 
e Directional antenna (Yagi) plus mount, lightning arrestor, wireless bridge 


Antenna B (see Table 11-6) is selected for the directional antenna. This antenna 
will provide sufficient RF signal level for the remote user. Each remote user will need 
a wireless bridge and a switch to connect multiple users. (Note that the bridge is set 
for a 2 Mbps data rate.) Figure 11-31 shows the setup for the remote user. 
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FIGURE 11-31 The setup for the remote user in the proposed point-to-multipoint wireless 
network. 
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SUMMARY 


This chapter presented an overview of wireless networking. The fundamental concept 
and example networks were also presented. The vendors of wireless networking 
equipment have made them very easy to integrate into existing networks, but the 
reader must understand that the key objective of the network administrator is to pro- 
vide a fast, reliable, and secure computer network. Carelessly integrating wireless 
components into the network can easily compromise this objective. Students should 
understand the following from reading this chapter: 


e The operating characteristics of the 802.11 wireless networks 

e The purpose of access points, wireless LAN adapters, and wireless bridges 
e How to perform a basic site survey on a building 

e How to configure the network for user mobility 

e How to plan multipoint wireless distribution 


A final note: The new wireless networking technologies have greatly simplified 
planning and installation. Anytime you are working with RF (radio frequencies) there 
is a chance of unexpected interference and noise. A well-planned RF installation re- 
quires a study of all known interference and a search for any possible interference. 
An RF study will also include signal path studies that enable the user to prepare a 
well-thought-out plan and allow an excellent prediction of received signal level. The 
bottom line is to obtain support for conducting an RF study. 


QUESTIONS AND PROBLEMS 


Section 11-2 


List two advantages of wireless networking. 
What are the three areas defined for the IEEE 802.11 standard? 
What is an ad hoc network? 
What is the purpose of an Extended Service Set? 
What are the four physical layer technologies being used in 802.11 wireless 
networking? 
6. Describe the frequency spectrum for the DSSS channels in 802.11b wireless 
networking. 
7. Define a pseudorandom sequence as it applies to FHSS. 
What must the FHSS transmitting and receiving units know to communicate? 
9. What is the frequency range used by 802.11a, and what modulation technique 
is used? 
10. What is the maximum data rate for the following: 
a. 802.11b 
b. 802.1la 
c. 802.11¢g 
d. 802.11n 
11. Define MIMO as it applies to 802.1 1n. 
12. What is the purpose of the power-save mode in 802.1 1n? 
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13. What is the purpose of an access point? 
14. How does the access point know if a wireless data packet is intended for its 
network? 
15. What is an association, and what is its purpose? 
16. Draw a picture of a point-to-point wireless connection. 
17. Draw a picture of a point-to-multipoint wireless network. 
18. What are the key issues to be obtained from conducting a site survey for each 
of the following? 
a. indoor 
b. outdoor 
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19. In what frequency band does Bluetooth operate? 

20. How many output power classes does Bluetooth have? List the power level and 
the operating range for each class. 

21. What is a piconet? 

22. What is the purpose of the inquiry procedure in Bluetooth? 

23. What is the purpose of the paging procedure in Bluetooth? 

24. Define the term backscatter. 

25. What are the three parameters that define an RFID system? 

26. Explain how power is provided to a passive RFID tag. 

27. Cite three advantages for using an active RFID tag. 

28. What are the three frequency bands typically used for RFID tags? 

29. What is the WiMax frequency standard for the United States? 

30. Why was OFDM selected for WiMax? 

31. How does WiMax differ from Wi-Fi? 
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32. What is the most important thing to do if using a wireless network? 
33. What is the purpose of wireless beacons? 

34. What information can be obtained from a wireless beacon? 

35. What is the purpose of WEP? 

36. List four guidelines for wireless security. 

37. Describe the steps used by WPA2 to authenticate a user. 

38. What is a RADIUS server? 
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39. What type of wireless connection is used to connect the home network to a mul- 
tipoint distribution site? 


40. Use the Internet to find a source of omnidirectional and directional antennas for 
each of the following standards. 
a. 802.11b 
b. 802.1la 
c. 802.1lg 
d. 802.11n 
Prepare a list of three manufacturers for each antenna type. Include cost figures. 


Critical Thinking 


41. A wireless network receiving site is experiencing occasional loss of signal due 
to interference. Discuss the steps you would take to correct this problem. 

42. Prepare a memo to your supervisor explaining why it is important to run en- 
cryption on your wireless network. 
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12-1 Introduction 

12-2 The Nature of Light 

12-3 Fiber Attenuation and Dispersion 
12-4 Optical Components 

12-5 Optical Networking Architectures 


12-6 System Design and Operational 
Issues 


OBJECTIVES 


Describe the advantages of glass fiber over 
copper conductors 

Describe the differences in how light travels 
in single and multimode fiber 

Define attenuation and dispersion in fiber 
optic cabling 

Describe the components of a fiber optic 
system 

Describe the issues of optical networking, 
including fiber-to-the-business and fiber to- 


12-7 Safety 

12-8 Troubleshooting Computer Networks 
(The OTDR) 

Summary 


Questions and Problems 


Describe the new networking developments 
associated with optical Ethernet 

Calculate a complete power budget analysis 
for a fiber optic system 

Understand the safety issues when working 
with fiber optics 

Describe how to use an OTDR and analyze 
the test data when conducting tests on a fiber 
optic cable 
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12-1 INTRODUCTION 


Recent advances in the development and manufacture of fiber optic systems have 
made them the latest frontier in the field of optical networking. They are being used 
extensively for both private and commercial data links and have replaced a lot of cop- 
per wire. The latest networking technologies to benefit from the development in op- 
tical networking are gigabit Ethernet and 10 gigabit Ethernet. 

A fiber optic network is surprisingly simple, as shown in Figure 12-1. It is com- 
prised of the following elements: 


1. A fiber optic transmission strand can carry the signal (in the form of a modu- 
lated light beam) a few feet or even hundreds or thousands of miles. A cable 
may contain three or four hair-like fibers or a bundle of hundreds of such fibers. 

2. A source of invisible infrared radiation—usually a light-emitting diode (LED) 
or a solid-state laser—that can be modulated to impress digital data or an ana- 
log signal on the light beam. 

3. A photosensitive detector to convert the optical signal back into an electrical 
signal at the receiver. 

4. Efficient optical connectors at the light source-to-cable interface and at the ca- 
ble-to-photo detector interface. These connectors are also critical when splic- 
ing the optical cable due to excessive loss that can occur at connections. 
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FIGURE 12-1 Fiber optic communication system. (From Modern Electronic Communication 


9/e, by J.S. Beasley & G. M. Miller, 2008, p. 781. Copyright ©2002 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 
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The advantages of optical communication links compared to copper conductors 
are enormous and include the following: 


1. Extremely wide system bandwidth: The intelligence is impressed on the light 
by varying the light’s amplitude. Because the best LEDs have a 5 ns response 
time, they provide a maximum bandwidth of about 100 MHz. With laser light 
sources, however, data rates over 10 Gbps are possible with a single mode fiber. 
The amount of information multiplexed on such a system, in the hundreds of 
Gbps, is indeed staggering. 

2. Immunity to electrostatic interference: External electrical noise and light- 
ning do not affect energy in a fiber optic strand. However, this is true only for 
the optical strands, not the metallic cable components or connecting electron- 
ics. 

3. Elimination of crosstalk: The light in one glass fiber does not interfere with, 
nor is it susceptible to, the light in an adjacent fiber. Recall that crosstalk results 
from the electromagnetic coupling between two adjacent copper wires. 

4. Lower signal attenuation than other propagation systems: Typical attenua- 
tion of a 1 GHz bandwidth signal for optical fibers is 0.03 dB per 100 ft, com- 
pared to 4.0 dB for RG-58U coaxial. 

5. Lower costs: Optical fiber costs are continuing to decline. The costs of many 
systems are declining with the use of fiber, and that trend is accelerating. 

6. Safety: In many wired systems, the potential hazard of short circuits requires 
precautionary designs. Additionally, the dielectric nature of optic fibers elimi- 
nates the spark hazard. 

7. Corrosion: Given that glass is basically inert, the corrosive effects of certain 
environments are not a problem. 

8. Security: Due to its immunity to and from electromagnetic coupling and radi- 
ation, optical fiber can be used in most secure environments. Although it can be 
intercepted or tapped, it is very difficult to do so. 


This chapter examines the issues of optical networking. Section 12-2 presents 
an overview of optical fiber fundamentals including a discussion on wavelengths and 
type of optical fibers. Section 12-3 examines the two distance-limiting parameters in 
fiber optic transmission, attenuation and dispersion. Optical components are pre- 
sented in section 12-4. This includes an overview of LEDs and lasers, intermediate 
components used in long-haul fiber networks, and the various types of connectors 
currently used on fiber. Optical networking is presented in section 12-5. An overview 
of SONET and FDDI are presented, followed by optical Ethernet. This section in- 
cludes a discussion on setting up the building and campus distribution for fiber. Sys- 
tem design of fiber networks is presented in section 12-6. This material examines the 
steps for preparing a light budget for a fiber optic link. Safety is extremely important 
when working with fiber. A brief overview of safety is presented in section 12-7. The 
chapter concludes with a section on using an OTDR for troubleshooting an optical 
fiber link. 
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12-2 THE NATURE OF LIGHT 


Before one can understand the propagation of light in a glass fiber, it is necessary to 
review some basics of light refraction and reflection. The speed of light in free space 
is 3 x 10° m/s but is reduced in other media, including fiber optic cables. The reduc- 
tion as light passes into denser material results in refraction of the light. Refraction 
causes the light wave to be bent, as shown in Figure 12-2. The speed reduction and 
subsequent refraction is different for each wavelength, as shown in Figure 12-2 (b). 
The visible light striking the prism causes refraction at both air/glass interfaces and 
separates the light into its various frequencies (colors) as shown. This same effect 
produces a rainbow, with water droplets acting as prisms to split the sunlight into the 
visible spectrum of colors (the various frequencies). 
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FIGURE 12-2 Refraction of light. (From Modern Electronic Communication 9/e, by J.S. 
Beasley & G. M. Miller, 2008, p. 782. Copyright ©2002 Pearson Education, Inc. Reprinted by 
permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


The amount of bend provided by refraction depends on the refractive index of Refractive Index 
the two materials involved. The refractive index, n, is the ratio of the speed of lightin Ratio of the speed of light in 
free space to the speed in a given material. It is slightly variable for different fre- free space to its speed in a 
quencies of light, but for most purposes a single value is accurate enough. The re- given material 
fractive index for free space (a vacuum) is 1.0, air is 1.0003, water is 1.33, and for the 
various glasses used in fiber optics, it varies between 1.42 and 1.50. 
In the fiber optics industry, spectrum notation is stated in nanometers (nm) 
rather than in frequency (Hz) simply because it is easier to use, particularly in spec- 
tral-width calculations. A convenient point of commonality is that 3 x 10'* Hz, or 300 
THz, is equivalent to 1 um, or 1000 nm. This relationship is shown in Figure 12-3. 
The one exception to this naming convention is when discussing dense wavelength 
division multiplexing (DWDM), which is the transmission of several optical chan- 
nels, or wavelengths, in the 1550-nm range, all on the same fiber. For DWDM sys- 
tems, notations, and particularly channel separations, are stated in terahertz (THz). 
Wavelength division multiplexing (WDM) systems are discussed in section 12-5. An 
electromagnetic wavelength spectrum chart is provided in Figure 12-3. The electro- 
magnetic light waves just below the frequencies in the visible spectrum extending 
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Infrared Light from 680 nm up are called infrared light waves. Whereas visible light has a wave- 
Light extending from 680 nm length from approximately 430 nm up to 680 nm, infrared light extends from 680 nm 
up to the wavelengths of the up to the microwaves. The frequency of visible light ranges from about 4.4 x 10!4 Hz 
microwaves for red up to 7 x 10!4 Hz for violet. For the frequencies above visible light, the elec- 
tromagnetic spectrum includes the ultraviolet (UV) rays and X rays. The frequencies 


Optical Spectrum 
ine P from the infrared on up are termed the optical spectrum. 


Light frequencies from the 
infrared on up 


Visible light 
Vio Blue Grn Yel ae | a Red 
Ultraviolet Infrared 
Far Near Fiber optics Near Middle Far 
300 390 455 492 577 597 622 770 850 1310 1620 1800 6000 40000 





Long 





Cosmic a electrical 
adio waves illati 
rays oscillations 


*107710761075107410731072107! 10° 10! 102 10° 10¢ 105 106 107 108 10° 10!° 10!! 10!2 10!3 10!4 10!5 1016 1017 
7 A 10° Meters 

















Wavelength 
3000 H,—Audio 


1000 kH, AM broadcast 
Frequency 3 X 10” H,—Radio/30 MH,/VHF 
3 X 108 H,—Radio/300 MH,/UHF 
3 X 10° H,—Microwave radio/3 GH, 
P 3 X 10''H, 

values in this row 

are in nanometers 3x 10H, 


FIGURE 12-3 The electromagnetic wavelength spectrum. (From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 784. Copyright ©2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, 
NJ.) 


The commonly used wavelengths in today’s fiber optic systems are 


e Multimode fiber: (850 and 1310) nm 
e Single mode fiber: (1310 and 1550) nm 
e Fiber to the home/business: 1600-1625 nm 


Cladding Typical construction of an optical fiber is shown in Figure 12-4. The core is the 
Material surrounding the portion of the fiber strand that carries the transmitted light. Its chemical composition 
core, which must have a is simply a very pure glass: silicon dioxide, doped with small amounts of germanium, 
lower index of refraction to boron, and phosphorous. The cladding is the material surrounding the core. It is al- 
keep the light in the core most always glass, although plastic cladding of a glass fiber is available but rarely 


used. In any event, the refraction index for the core and the cladding are different. The 
cladding must have a lower index of refraction to keep the light in the core. A plastic 
coating surrounds the cladding to provide protection. Figure 12-5 shows examples of 
fiber strands from a fiber bundle. 
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FIGURE 12-4 Single-fiber construction. (From Modern Electronic Communication 9/e, by 
J.S. Beasley & G. M. Miller, 2008, p. 785. Copyright ©2008 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 





FIGURE 12-5 Fiber strands (courtesy of Anixter, Inc.). 


Another measure of a fiber’s light acceptance is numerical aperture. The nu- Numerical Aperture 
merical aperture is a basic specification provided by the manufacturer that indicates A measure of a fiber’s ability 
the fiber’s ability to accept light and shows how much light can be off-axis and still to accept light 
propagate. 

Several types of optical fibers are available, with significant differences in their 
characteristics. The first communication-grade fibers (early 1970s) had light carry- 
ing core diameters about equal to the wavelength of light. They could carry light in 
just a single waveguide mode. 

The difficulty of coupling significant light into such a small fiber led to devel- Multimode Fiber 
opment of fibers with cores of about 20 to 100 um. These fibers support many wave- A fiber that supports many 
guide modes and are called multimode fibers. The first commercial fiber optic Optical waveguide modes 
systems used multimode fibers with light at 800 to 900 nm wavelengths. A variation 
of the multimode fiber was subsequently developed, termed graded-index fiber. This 
afforded greater bandwidth capability. 
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As the technology became more mature, the single-mode fibers were found to 
provide lower losses and even higher bandwidth. This has led to their use at 1300 nm, 
1550 nm, up to 1625 nm in many telecommunication and fiber-to-the home applica- 
tions. The new developments have not made old types of fiber obsolete. The applica- 
tion now determines the type used. The following major criteria affect the choice of 
fiber type: 


1. Signal losses 
2. Ease of light coupling and interconnection 
3. Bandwidth 


Pulse Dispersion A graphic of a fiber showing three different modes (that is, multimode) of prop- 
Stretching of received pulse = agation is presented in Figure 12-6. The lowest-order mode is seen traveling along the 
width because of multiple axis of the fiber, and the middle-order mode is reflected twice at the interface. The 
paths taken by the light highest-order mode is reflected many times and makes many trips across the fiber. As 


a result of these variable path lengths, the light entering the fiber takes a variable 
length of time to reach the detector. This results in a pulse-broadening or dispersion 
characteristic, as shown in Figure 12-6. This effect is termed pulse dispersion and 
limits the maximum distance and rate at which data (pulses of light) can be practi- 
cally transmitted. You will also note that the output pulse has reduced amplitude as 
well as increased width. The greater the fiber length, the worse this effect will be. As 
a result, manufacturers rate their fiber in bandwidth per length, such as 400 MHz/km. 
This means the fiber can successfully transmit pulses at the rate of 400 MHz for 1 km, 
200 MHz for 2 km, and so on. In fact, current networking standards limit multimode 
fiber distances to 2 km. Of course, longer transmission paths are attained by locating 
regenerators at appropriate locations. Step-index multimode fibers are rarely used in 
networking due to their very high amounts of pulse dispersion and minimal band- 
width capability. 


High-order mode 
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FIGURE 12-6 Modes of propagation for step-index fiber. (From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 787. Copyright ©2002 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Graded-Index Fiber 


Graded-index Fiber In an effort to overcome the pulse-dispersion problem, the graded-index fiber was 
The index of refraction is developed. In the manufacturing process for this fiber, the index of refraction 1s tai- 
gradually varied with a lored to follow the parabolic profile shown in Figure 12-7. This results in low-order 
parabolic profile modes traveling through the constant-density material in the center. High-order 


modes see a lower index of refraction material farther from the core, and thus the ve- 
locity of propagation increases away from the center. Therefore, all modes, even 
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though they take various paths and travel different distances, tend to traverse the fiber 
length in about the same amount of time. These fibers can therefore handle higher 
bandwidths and/or provide longer lengths of transmission before pulse dispersion ef- 
fects destroy intelligibility and introduce bit errors. 


Low-order 
mode ray 
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FIGURE 12-7 Modes of propagation for graded-index fiber. (From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 788. Copyright ©2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Graded-index multimode fibers with 50 um-diameter cores and 125 um 
cladding are used in many telecommunication systems at up to 300 megabits per sec- 
ond (Mbps) over 50-km ranges without repeaters. Graded-index fiber with up to a 
100 um core is used in short-distance applications that require easy coupling from the 
source and high data rates, such as for video and high-speed local area networks. The 
larger core affords better light coupling than the 50 um core and does not significantly 
degrade the bandwidth capabilities. In the telecommunications industry, there are two 
commonly used core sizes for graded-index fiber, these being 50 and 62.5 um. Both 
have 125 um cladding. The large core diameter and the high NA (numerical aperture) 
of these fibers simplify input cabling and allow the use of relatively inexpensive con- 
nectors. Fibers are specified by the diameters of their core and cladding. For exam- 
ple, the fibers just described would be called 50/125 fiber and 62/125 fiber. 


Single-Mode Fibers 


A technique used to minimize pulse dispersion effects is to make the core extremely Single-mode Fiber 
small—on the order of a few micrometers. This type accepts only a low-order mode, Fiber cables with core 
thereby allowing operation in high-data-rate, long-distance systems. This fiber is typ- diameters of about 7 to 10 
ically used with high-power, highly directional modulated light sources such as a Hm; light follows a single 
laser. Fibers of this variety are called single-mode (or monomode) fibers. Core di- path 

ameters of only 7 to 10 um are typical. 

This type of fiber is termed a step-index fiber. Step index refers to the abrupt Step-index Fiber 
change in refractive index from core to cladding, as shown in Figure 12-8. The sin- Fibers in which there is an 
gle-mode fiber, by definition, carries light in a single waveguide mode. A single- abrupt change in the 
mode fiber will transmit a single mode for all wavelengths longer than the cutoff refractive index from the 
wavelength. A typical cutoff wavelength is 1260 nm. At wavelengths shorter than the re to the cladding 
cutoff, the fiber supports two or more modes and becomes multimode in operation. 
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Long Haul 

The transmission of data 
over hundreds or thousands 
of miles 


Mode Field Diameter 
The actual guided optical 
power distribution, which is 
typically a micron or so 
larger than the core 
diameter; single-mode fiber 
specifications typically list 
the mode field diameter 
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FIGURE 12-8 Types of optical fiber. (From Modern Electronic Communication 9/e, by J.S. 
Beasley & G. M. Miller, 2008, p. 789. Copyright ©2008 Pearson Education, Inc. Reprinted by 
permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Single-mode fibers are widely used in long-haul and wide area network appli- 
cations. They permit transmission of about 10 Gbps and a repeater spacing of up to 
80 km. These bandwidth and repeater spacing capabilities are constantly being up- 
graded by new developments. 

When describing the core size of single-mode fibers, the term mode field di- 
ameter is the term more commonly used. Mode field diameter is the actual guided 
optical power distribution diameter. In a typical single-mode fiber, the mode field di- 
ameter is 1 um or so larger than the core diameter. The actual value depends on the 
wavelength being transmitted. In fiber specification sheets, the core diameter is stated 
for multimode fibers, but the mode field diameter is typically stated for single-mode 
fibers. 

Figure 12-8 provides a graphical summary of the three types of fiber discussed, 
including typical dimensions, refractive index profiles, and pulse-dispersion effects. 
Table 12-1 provides a general comparison of single-mode and multimode fiber. 


TABLE 12-1 Generalized Comparisons of Single-Mode and 
Multimode Fiber 


Feature Single-Mode Multimode 

Core size Smaller (7.5 to 10 um) Larger (50 to 100 um) 
Numerical aperture Smaller (0.1 to 0.12) Larger (0.2 to 0.3) 
Index of refraction profile Step Graded 


Attenuation (dB/km) (a 
function of wavelength) 


Smaller (0.25 to 
0.5 dB/km) 


Larger (0.5 to 4.0 dB/km) 
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Feature Single-Mode Multimode 


Information-carrying Very large Small-medium 

capacity (a function of 

distance) 

Usage Long-haul carriers and Short-haul LAN 
CATV, CCTV 

Capacity Expressed in megabits Expressed in Mbps 
per second (Mbps) 

Which to use (this is a Over 2 km Under 2 km 


judgment call) 


Source: From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 790. Copy- 
right ©2002 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle 
River, NJ. 


12-3 FIBER ATTENUATION AND DISPERSION 


There are two key distance-limiting parameters in fiber optic transmissions: attenua- 
tion and dispersion. 


Attenuation 


Attenuation is the loss of power introduced by the fiber. This loss accumulates as the 
light is propagated through the fiber strand. The loss is expressed in dB/km (decibels 
per kilometer) of length. The loss, or attenuation, of the signal is due to the combi- 
nation of four factors: scattering, absorption, macrobending, and microbending. Two 
other terms for attenuation are intrinsic and extrinsic. 
Scattering is the primary loss factor over the three wavelength ranges. Scat- Scattering 
tering in telecommunication systems accounts for 85 percent of the loss and is the ba- Caused by refractive index 
sis of the attenuation curves and values, such as that shown in Figure 12-9, and fluctuations; accounts for 
account industry data sheets. The scattering is known as Rayleigh scattering and is 85% of attenuation loss 
caused by refractive index fluctuations. Rayleigh scattering decreases as wavelength 
increases, as shown in Figure 12-9. 
Absorption is the second loss factor, a composite of light interaction with the Absorption 
atomic structure of the glass. It involves the conversion of optical power to heat. One Light interaction with the 
portion of the absorption loss is due to the presence of OH hydroxol ions dissolved atomic structure of the fiber 
in the glass during manufacture. These cause the water attenuation or OH peaks material; also involves the 
shown in Figure 12-9 and other attenuation curves. conversion of optical power 
Macrobending is the loss caused by the light mode breaking up and escaping to heat 
into the cladding when the fiber bend becomes too tight. As the wavelength increases,  Macrobendin g 
the loss in a bend increases. Although losses are in fractions of dB, the bend radius in Loss due to light breaking up 
small splicing trays and patching enclosures should be minimal. and escaping into the 
Microbending is a type of loss caused by mechanical stress placed on the fiber cladding 
strand, usually in terms of deformation resulting from too much pressure being ap- 
plied to the cable. For example, excessively tight tie wrap or clamps will contribute 
to this loss. This loss is noted in fractions of a dB. 


Microbending 

Loss caused by very small 
mechanical deflections and 
stress on the fiber 
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FIGURE 12-9 Typical attenuation of cabled fiber strands. (From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 792. Copyright ©2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Dispersion 
Dispersion Dispersion, or pulse broadening, is the second of the two key distance-limiting para- 
Broadening of a light pulse meters in a fiber optic transmission system. It is a phenomenon in which the light 
as it propagates through a pulse spreads out in time as it propagates along the fiber strand. This results in a 
fiber strand broadening of the pulse. If the pulse broadens excessively, it can blend into the adja- 


cent digital time slots and cause bit errors. Figure 12-10 illustrates the effects of dis- 
persion on a light pulse. There are three types of dispersion: 


Modal Dispersion e Modal dispersion: The broadening of a pulse due to different path lengths 
Chromatic Dispersion taken through the fiber by different modes. 

Polarization Mode e Chromatic dispersion: The broadening of a pulse due to different propagation 
Dispersion velocities of the spectral components of the light pulse. 


e Polarization mode dispersion: The broadening of a pulse due to the different 
propagation velocities of the X and Y polarization components of the light 
pulse. 


Modal dispersion occurs predominantly in multimode fiber. From a light 
source, the light rays can take many paths as they propagate along the fiber. Some 
light rays do travel in a straight line, but most take variable-length routes. As a result, 
the rays arrive at the detector at different times, and the result is pulse broadening. 
This was shown in Figures 12-6 and 12-7. The use of graded-index fiber greatly re- 
duces the effects of modal dispersion and therefore increases the bandwidth to about 
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1 GHz/km. On the other hand, single-mode fiber does not exhibit modal dispersion, 
given that only a single mode is transmitted. 
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FIGURE 12-10 Pulse broadening or dispersion in optical fibers. (Adapted From Modern 
Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 793. Copyright 
©2008 Pearson Education, Inc. Adapted by permission of Pearson Education, Inc., Upper 
Saddle River, NJ.) 


A second equally important type of dispersion is chromatic. Chromatic disper- 
sion 1s present in both single-mode and multimode fibers. Basically, the light source, 
both lasers and LEDs, produce several different wavelength light rays when generat- 
ing the light pulse. Each light ray travels at a different velocity, and as a result, these 
rays arrive at the receiver detector at different times, causing the broadening of the 
pulse. 

There is a point where dispersion is actually at zero, this being determined by Zero-dispersion 
the refractive index profile. This happens near 1310 nm and is called the zero dis- Wavelength 
persion wavelength. By altering the refractive index profile, this zero dispersion Point where the dispersion is 
wavelength can be shifted to the 1550-nm region. Such fibers are called dispersion- actually zero 
shifted. This is significant because the 1550-nm region exhibits a lower attenuation 
than at 1310 nm. This becomes an operational advantage, particularly to long-haul 
carriers because with minimum attenuation and minimum dispersion in the same 
wavelength region, repeater and regenerator spacing can be maximized. 

To further illustrate chromatic dispersion, Figure 12-11 shows a step-index sin- 
gle-mode fiber with different spectral components propagating directly along the 
core. Because they travel at different velocities, they arrive at the receiver detector at 
different times, causing a wider pulse to be detected than was transmitted. 
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Polarization mode is the type of dispersion found in single-mode systems and 
becomes of particular concern in long-haul and wide area network high-data-rate dig- 
ital and high-bandwidth analog video systems. In a single-mode fiber, the single 
propagating mode has two polarizations, horizontal and vertical, or X axis and Y axis. 
The index of refraction can be different for the two components and this affects their 
relative velocity as shown in Figure 12-12. 
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FIGURE 12-11 Spectral component propagation: single mode, step index. (From Modern 
Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 794. Copyright 
©2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper 
Saddle River, NJ.) 


= 





i—i 


Amount of 
polarization 
mode dispersion 


FIGURE 12-12 Polarization mode dispersion in single-mode fiber. (From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 794. Copyright ©2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Dispersion Compensation 


A considerable amount of fiber in use today was installed in the 1980s and early 
1990s. This cable was called the class IVa variety. These cables were optimized to op- 
erate in the 1310-nm region, which means their zero-dispersion point was in the 1310- 
nm wavelength. Due to continuous network expansion needs in recent years, it is 
often desired to add transmission capacity to the older fiber cables by using the 1550- 
nm region, particularly since the attenuation at 1550 nm is less than at 1310 nm. One 
major problem arises at this point. The dispersion value is higher at 1550 nm (see 
Table 12-2), which severely limits its distance capability. 
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TABLE 12-2 Dispersion Values for Common Optical Wavelengths 


Wavelength (nm) Pulse Dispersion [ps/(nm—km) ] 


850 80 to 100 
1310 2.5 to 3.5 
1550 17 


Source: From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 792. Copy- 
right © 2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle 
River, NJ. 


To overcome this problem, a fiber called dispersion compensating fiber was Dispersion 
developed. This fiber acts like an equalizer, negative dispersion canceling positive Compensating Fiber 
dispersion. The fiber consists of a small coil normally placed in the equipment rack Acts like an equalizer, 
just prior to the optical receiver input. This does introduce some insertion loss (3 to canceling dispersion effects 
10 dB) and may require the addition of an optical-line amplifier. and yielding close to zero 
A new device is a fiber Bragg grating. This technology involves etching ir- aie peson eC oo 
regularities onto a short strand of fiber, which changes the index of refraction and, in anew 
turn, reflects slower wavelengths to the output before the faster ones. This results in Fiber Bragg Grating 
a compressed, or narrower, light pulse, minimizing intersymbol interference (ISI). A short strand of modified 
fiber that changes the index 
of refraction and minimizes 
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Two kinds of light sources are used in fiber optic communication systems: the diode DL 
laser (DL) and the high-radiance light-emitting diode (LED). In designing the opti- Diode laser 
mum system, the special qualities of each light source should be considered. Diode 
-e LED 
lasers and LEDs bring to systems different characteristics: i ae 
Light-emitting diode 


Power levels 
Temperature sensitivities 
Response times 
Lifetimes 
Characteristics of failure 


Ca P 


The diode laser is a preferred source for moderate-band to wideband systems. 
It offers a fast response time (typically less than 1 ns) and can couple high levels of 
useful optical power (usually several mW) into an optical fiber with a small core and 
a small numerical aperture. Recent advances in DL fabrication have resulted in pre- 
dicted lifetimes of 10° to 10° hours at room temperature. Earlier DLs were of such 
limited life as to minimize their use. The DL is usually used as the source for single- 
mode fiber since LEDs have a low input coupling efficiency. 

Some systems operate at a slower bit rate and require more modest levels of 
fiber-coupled optical power (50 to 250 uW). These applications allow the use of high- 
radiance LEDs. The LED is cheaper, requires less complex driving circuitry than a DL, 
and needs no thermal or optical stabilizations. In addition, LEDs have longer operating 
lives (10° to 10’ hours) and fail in a more gradual and predictable fashion than DLs. 

The light output wavelength spread, or spectrum, of the DL is much narrower than 
that of LEDs: about 1 nm compared with about 40 nm for an LED. Narrow spectra are 
advantageous in systems with high bit rates since the dispersion effects of the fiber on 
pulse width are reduced, and thus pulse degradation over long distances is minimized. 
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Distributed Feedback 
(DFB) Laser 

A more stable laser suitable 
for use in DWDM systems 


Dense Wavelength 
Division Multiplex 
(DWDM) 

Incorporates the 
propagation of several 
wavelengths in the 1550-nm 
range for a single fiber 


Vertical Cavity Surface 
Emitting Lasers 
(VCSELs) 

Lasers with the simplicity of 
LEDs and the performance of 
lasers 


Tunable Laser 

Laser in which the 
fundamental wavelength can 
be shifted a few nanometers, 
ideal for traffic routing in 
DWDM systems 


462 Chapter 12 œ 


Another laser device, called a distributed feedback (DFB) laser, uses tech- 
niques that provide optical feedback in the laser cavity. This enhances output stabil- 
ity, which produces a narrow and more stable spectral width. Widths are in the range 
of 0.01 to 0.1 nm. This allows the use of more channels in dense wavelength divi- 
sion multiplex (DWDM) systems. Another even more recent development is an en- 
tirely new class of laser semiconductors called vertical cavity surface emitting 
lasers (VCSELs). These lasers can support a much faster signal rate than LEDs, in- 
cluding gigabit networks. They do not have some of the operational and stability 
problems of conventional lasers, however. 

VCSELs have the simplicity of LEDs with the performance of lasers. Their pri- 
mary wavelength of operation is in the 750 to 850-nm region, although development 
work is underway in the 1310-nm region. Reliabilities approaching 10” hours are pro- 
jected. Table 12-3 provides a comparison of laser and LED optical transmitters. 


TABLE 12-3 Comparison of Laser and LED Optical Transmitters 


Laser LED 
Usage High bit rate, long haul Low bit rate, short haul, LAN 
Modulation rates <40 Mbps to gigabits <400 Mbps 
Wavelength Single-mode at 1310 and Single-mode and multimode at 
1550 nm 850/1310 nm 
Rise time <1 ns 10-100 ns 
Spectral width <1 nm up to 4 nm 40 to 100 nm 


Discrete lines 
0.3 to 1 mW ( -5 to 0 dBm) 


Spectral content 
Power output 


Broad spectrum/continuous 
10 to 150 uW ( -20 to -8 dBm) 


Reliability Lower Higher 

Linearity 40 dB (good) 20 dB (moderate) 
Emission angle Narrow Wide 

Coupling efficiency Good Poor 
Temperature/humidity Sensitive Not sensitive 
Durability/life Medium (10° h) High (> 10°h) 
Circuit complexity High Low 

Cost High Low 


Note: The values shown in Table 12-3 depend, to some extent, on the associated electronic circuitry. 


Source: From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 800. Copy- 
right ©2002 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle 
River, NJ. 


Most lasers emit a fixed wavelength, but there is a class called tunable lasers 
in which the fundamental wavelength can be shifted a few nanometers, but not from 
a modulation point of view as in frequency modulation. Figure 12-13 shows an ex- 
ample of a tunable laser diode module. The primary market for these devices is in a 
network operations environment where DWDM is involved. Traffic routing is often 
made by wavelength, and, as such, wavelengths or transmitters must be assigned and 
reassigned to accommodate dynamic routing or networking, bandwidth on demand, 
seamless restoration (serviceability), optical packet switching, and so on. Tunable 
lasers are used along with either passive or tunable WDM filters. 


Optical Networking 
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FIGURE 12-13 A tunable laser diode module (courtesy of Fujitsu Compound 
Semiconductor, Inc.). 


Intermediate Components 


The typical fiber optic telecommunication link—as shown in Figure 12-1—is a light 
source or transmitter and light detector or receiver interconnected by a strand of op- 
tical fiber, or light pipe, or glass. An increasing number of specialized networks and 
system applications have various intermediate components along the span between 
the transmitter and the receiver. A brief review of these devices and their uses is pro- 
vided. 

Isolators An isolator is an inline passive device that allows optical power to 
flow in one direction only; typical forward-direction insertion losses are less than 0.5 
dB, with reverse-direction insertion losses of at least 40 to 50 dB. They are polariza- 
tion independent and available for all wavelengths. One popular use of isolators is 
preventing reflections caused by optical span irregularities from getting back into the 
laser transmitter. Distributed feedback lasers are particularly sensitive to reflections, 
which can result in power instability, phase noise, linewidth variations, and so on. 

Attenuators Attenuators are used to reduce the received signal level 
(RSL). They are available in fixed and variable configurations. The fixed attenuators 
are for permanent use in point-to-point systems to reduce the RSL to a value within 
the receiver’s dynamic range. Typical values of fixed attenuators are 3 dB, 5 dB, 10 
dB, 15 dB, and 20 dB. Variable attenuators are typically for temporary use in cali- 
bration, testing, and laboratory work but more recently are being used in optical net- 
works, where changes are frequent and require programmability. 

Branching Devices Branching devices are used in simplex systems where 
a single optical signal is divided and sent to several receivers, such as point-to-mul- 
tipoint data or a CATV distribution system. They can also be used in duplex systems 
to combine or divide several inputs. The units are available for single-mode and mul- 
timode fiber. 

The primary optical parameters are insertion loss and return loss, but the val- 
ues for each leg may vary slightly due to differences in the device mixing region. 

Splitters Splitters are used to split, or divide, the optical signal for distribu- 
tion to any number of places. The units are typically simplex and come in a variety 
of configurations, such as 1 x 4, 1x 8,..., 1 x 64. 
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Fiber, Light Pipe, Glass 
Terms used to describe a 
fiber optic strand 


Isolator 

An inline passive device that 
allows optical power to flow 
only in one direction 


Received Signal Level 
(RSL) 

The input signal level to an 
optical receiver 
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Couplers Couplers are available in a variety of simplex or duplex configura- 
tions, such as 1 x 2, 2 x 2, 1 x 4, and various combinations up to 144 x 144. There 
are both passive and active couplers, the latter most often associated with data net- 
works. Couplers can be wavelength-dependent or -independent. 

Wavelength Division Multiplexers Wavelength division multiplexers 
combine or divide two or more optical signals, each having a different wavelength. 
They are sometimes called optical beamsplitters. They use dichroic filtering, which 
passes light selectively by wavelength, or diffraction grating, which refracts light 
beams at an angle, selectively by wavelength. An additional optical parameter of im- 
portance is port-to-port crosstalk coupling, where wavelength number one leaks out 
of or into the port of wavelength number two. A port is the input or output of the device. 

Optical-Line Amplifiers Optical-line amplifiers are not digital regenera- 
tors, but analog amplifiers. Placement can be at the optical transmitter output, 
midspan, or near the optical receiver. They are currently used by high-density long- 
haul carriers, transoceanic links, and, to some extent, the CATV industry. 


Detectors 


The devices used to convert the transmitted light back into an electrical signal are a 
vital link in a fiber optic system. This important link 1s often overlooked in favor of 
the light source and fibers. However, simply changing from one photodetector to an- 
other can increase the capacity of a system by an order of magnitude. 

The important characteristics of light detectors are as follows: 


1. Responsivity: This is a measure of output current for a given light power 
launched into the diode. It is given in amperes per watt at a particular wave- 
length of light. 

2. Dark current: This is the thermally generated reverse leakage current (under 
dark conditions) in the diode. In conjunction with the response current as pre- 
dicted by device responsivity and incident power, it provides an indication of 
on—off detector output range. 

3. Response speed: This determines the maximum data rate capability of the de- 
tector. 

4. Spectral response: This determines the responsivity that is achieved relative 
to the wavelength at which responsivity is specified. Figure 12-14 provides a 
spectral response versus light wavelength for a typical photodiode. The curve 
shows that its relative response at 900 nm (0.9 um) is about 80 percent of its 
peak response at 800 nm. 


It should be noted that a second role exists for light detectors in fiber optic sys- 
tems. Detectors are used to monitor the output of the laser diode sources. A detector 
is placed in proximity to the laser’s light output. The generated photocurrent is used 
in a circuit to maintain constant light output under varying temperature and bias con- 
ditions. This is necessary to keep the laser just above its threshold forward bias cur- 
rent and to enhance its lifetime by not allowing the output to increase to higher levels. 
Additionally, the receiver does not want to see the varying light levels of a noncom- 
pensated laser. Optical fiber is made of ultrapure glass. Optical fiber makes window 
glass seem opaque by comparison. A window made of this pure glass 1 km thick 
would be as transparent as a normal pane of glass. It is therefore not surprising that 
the process of making connections from light source to fiber, fiber to fiber, and fiber 
to detector becomes critical in a system. The low-loss capability of the glass fiber can 
be severely compromised if these connections are not accomplished in exacting fashion. 
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FIGURE 12-14 Spectral response of a p-i-n diode. (From Modern Electronic Communication 
9/e, by J.S. Beasley & G. M. Miller, 2008, p. 803. Copyright ©2008 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Optical fibers are joined either in a permanent fusion splice or with a mechan- 
ical splice (for example, connectors and camsplices). The connector allows repeated 
matings and unmatings. Above all, these connections must lose as little light as pos- 
sible. Low loss depends on correct alignment of the core of one fiber to another, or 
to a source or detector. Losses for properly terminated fusion and mechanical splices 
is typically 0.2 dB or less. Signal loss in fibers occurs when two fibers are not per- 
fectly aligned within a connector. Axial misalignment typically causes the greatest 
loss—about 0.5 dB for a 10 percent displacement. Figure 12-15 illustrates this con- 
dition as well as other loss sources. Angular misalignment [Figure 12-15(b)] can usu- 
ally be well controlled in a connector. Most connectors leave an air gap, as shown in 
Figure 12-15(c). The amount of gap affects loss since light leaving the transmitting 
fiber spreads conically. 

The losses due to rough end surfaces shown in Figure 12-15 (d) are often 
caused by a poor cut, or “cleave,” but can be minimized by polishing or using pre- 
polished connectors. Polishing typically takes place after a fiber has been placed in a 
connector. The source of connection losses shown in Figure 12-15(d) can, for the 
most part, be controlled by a skillful cable splicer. There are four other situations that 
can cause additional connector or splice loss, although in smaller values. These are 
shown in Figure 12-15 (e), (Ð, (g), and (h). These are related to the nature of the fiber 
strand at the point of connection and are beyond the control of the cable splicer. The 
effect of these losses can be minimized somewhat by the use of a rotary mechanical 
splice, which by the joint rotation will get a better core alignment. 

With regard to connectorization and splicing, there are two techniques to con- Fusion Splicing 
sider for splicing. Fusion splicing is a long-term method, in which two fibers are ^ long-term method where 
fused or welded together. The two ends are stripped of their coating, cut or cleaved, two fibers are fused or 
and inserted into the splicer. The ends of the fiber are aligned, and an electric arc is a 
fired across the ends, melting the glass and fusing the two ends together. There are 
both manual and automatic fusion splicers; the choice usually depends on the num- 
ber of splices to be done on a given job, technician skill levels available, and, of 
course, the budget. Typical insertion losses of less than 0.1 dB—frequently in the 
0.05 dB range—can be consistently achieved. 
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FIGURE 12-15 Sources of connection loss. (From Modern Electronic Communication 9/e, 
by J.S. Beasley & G. M. Miller, 2008, p. 806. Copyright © 2008 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Mechanical splices can be permanent and an economical choice for certain 
fiber-splicing applications. Mechanical splices also join two fibers together, but they 
differ from fusion splices in that an air gap exists between the two fibers. This results 
in a glass-air-glass interface, causing a severe double change in the index of refrac- 
tion. This change results in an increase in insertion loss and reflected power. The con- 
dition can be minimized by applying an index-matching gel to the joint. The gel is a 
jellylike substance that has an index of refraction much closer to the glass than air. 
Therefore, the index change is much less severe. Mechanical splices have been 
universally popular for repair and for temporary or laboratory work. They are quick, 
cheap, easy, and quite appropriate for small jobs. The best method for splicing de- 
pends on the application, including the expected future bandwidth (that is, gigabit), 
traffic, the job size, and economics. The loss in a mechanical splice can be minimized 
by using an OTDR to properly align the fiber when you are making the splice. 


Mechanical Splices 

Two fibers joined together 
with an air gap, thereby 
requiring an index-matching 
gel to provide a good splice 


Index-matching Gel 


pee eene ence ta Fiber Connectorization 

has an index of refraction 

much closer to glass than For fiber connectorization, there are several choices on the market such as SC, ST, 

to air FC, LC, MT-RJ, and others. The choice of the connector is typically dictated by the 
hardware being used and the fiber application. Figure 12-16 (a—e) provides some ex- 

SC, ST, FC, LC, MT-RJ amples of SC, ST, FC, LC, and MTRJ connectors. 

Typical fiber connectors on 

the market 
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FIGURE 12-16 Typical fiber connections. [(a), (b), and (c) From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 808. Copyright ©2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ. 
(d) and (e) from Black Box Corporation. ] 


Some general requirements for fiber connectors are as follows: 


e Easy and quick to install 

e Low insertion loss—a properly installed connector will have as little as 0.25 dB 
insertion loss 

e High return loss greater than 50 dB—this is increasingly important in gigabit 
networks, DWDM systems, high-bandwidth video, etc. 

e Repeatability 

e Economical 


In preparing the fiber for splicing or connectorization, only the coating is re- 
moved from the fiber strand. The core and the cladding are not separable. The 125m 
cladding diameter is the portion that fits into the splice or connector, and therefore 
most devices can handle both single and multimode fiber. 

Sometimes the issue arises as to the advisability of splicing together fibers of 
different core sizes. The one absolute rule is, do not splice single and multimode fiber 
together! Similarly, good professional work does not allow different sizes of multi- 
mode fiber to be spliced together. However, in an emergency, different sizes can be 
spliced together if the following is considered: 
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When transmitting from a small to large-core diameter, there will be minimal, 
if any, increase in insertion loss. However, when the transmission is from a larger to 
a smaller core size, there will be added insertion loss, and a considerable increase in 
reflected power should be expected. 

Industrial practice has confirmed the acceptability of different core size inter- 
changeability for emergency repairs in the field, mainly as the result of tests with 50 
m and 62.5 m multimode fiber for a local area network. 


12-5 OPTICAL NETWORKING ARCHITECTURES 


The need for increased bandwidth is pushing the fiber optic community into optical 
networking solutions that are almost beyond the imagination of even the most ad- 
vanced networking person. Optical solutions for long-haul, wide area, metropolitan, 
campus and local area networks are available. Cable companies are already using the 
high-bandwidth capability of fiber to distribute cable programming as well as data 
throughout their service areas. 

The capital cost differences between a fiber system and a copper-based system 
are diminishing, and the choice of networking technology for new networks is no 
longer just budgetary. Fiber has the capacity to carry more bandwidth, and as the fiber 
infrastructure cost decreases, then fiber will be chosen to carry the data. Of course, 
the copper infrastructure is already in place, and new developments are providing in- 
creases in data speed over copper (for example, CAT6 and CAT7). However, optical 
fiber is smaller and easier to install in already crowded ducts and conduits. Addition- 
ally, security is enhanced because it is difficult to tap optical fiber without detection. 
Will fiber replace copper in computer networks? For many years, a hybrid solution of 
fiber and copper is expected. 


Defining Optical Networking 


Optical networks are becoming a major part of data delivery in homes, in businesses, 
and for long-haul carriers. The telecommunications industry has been using fiber to 
carry long-haul traffic for many years. Some major carriers are merging with cable 
companies so that they are poised to provide high-bandwidth capabilities to the home. 
Developments in optical technologies are reshaping the way we will use fiber in fu- 
ture optical networks. 

But there is a new slant with optical networks. Dense wave division multiplex- 
ing and tunable lasers have changed the way optical networks can be implemented. It 
is now possible to transport many wavelengths over a single fiber. Lab tests at AT&T 
have successfully demonstrated the transmission of 1,022 wavelengths over a single 
fiber. Such transport of multiple wavelengths opens up the possibilities to routing or 
switching many different data protocols over the same fiber but on different wave- 
lengths. The development of cross-connects that allow data to arrive on one wave- 
length and leave on another opens other possibilities. 

SONET/SDH Synchronous optical network (SONET) and SDH were the North American 
Synchronous optical network; and international standards for the long-haul optical transport of telecommunication 


protocol standard for optical for many years. SONET/SDH defined a standard for the following: 


transmission in long-haul ree 
communication/synchronous e Increase in network reliability 


digital hierarchy e Network management 
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e Defining methods for the synchronous multiplexing of digital signals such as 
DS-1 (1.544 Mbps) and DS-3 (44.736 Mbps) 

e Defining a set of generic operating/equipment standards 

e Flexible architecture 


SONET/SDH specifies the various optical carrier (OC) levels and the equiva- 
lent electrical synchronous transport signals (STS) used for transporting data in a 
fiber optic transmission system. Optical network data rates are typically specified in 
terms of the SONET hierarchy. Table 12-4 lists the more common data rates. 


TABLE 12-4 SONET Hierarchy Data Rates 


Signal Bit Rate Capacity 
OC-1 (STS-1) 51,840 Mbps 28DS-Is or 1 DS-3 
OC-3 (STS-3) 155.52 Mbps 84DS-Is or 3 DS-3s 


OC-12 (STS-12) 
OC-48 (STS-48) 
OC-192 (STS-192) 


622.080 Mbps 
2.48832 Gbps 
9.95328 Gbps 


336 DS-1s or 12 DS-3s 
1344 DS-1s or 48 DS-3s 
5376 DS-Is or 192 DS-3s 


OC: Optical carrier—DS-1: 1.544 Mbps 
STS: Synchronous transport signal—DS-3: 44.736 Mbps 


Source: From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 818. Copy- 
right © 2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle 
River, NJ. 


The architectures of fiber networks for the home include providing fiber to the 
curb (F TTC) and fiber to the home (FTTH). FTTC is being deployed today. It pro- 
vides high bandwidth to a location with proximity to the home and provides a high- 
speed data link, via copper (twisted-pair), using VDSL (very high-data digital 
subscriber line). This is a cost-effective way to provide large-bandwidth capabilities 
to ahome. FTTH will provide unlimited bandwidth to the home; however, the key to 
its success is the development of a low-cost optical-to-electronic converter in the 
home and laser transmitters that are tunable to any desired channel. 

Another architecture in place is fiber to the business (FTTB). A fiber connec- 
tion to a business provides for the delivery of all current communication technologies 
including data, voice, video, conferencing, and so on. An additional type is fiber to 
the desktop (F TTD). This setup requires that the computer has a fiber network inter- 
face card (NIC). FTTD 1s useful in applications such as computer animation work that 
has high-bandwidth requirements. 

Conventional high-speed Ethernet networks are operating over fiber. This 1s 
called optical Ethernet and uses the numerics listed in Table 12-5 for describing the 
type of network configuration. Fiber helps to eliminate the 100-m distance limit as- 
sociated with unshielded twisted-pair (UTP) copper cable. This is possible because 
fiber has a lower attenuation loss. In a star network, the computer and the switch are 
directly connected. If the fiber is used in a star network, an internal or external media 
converter is required. The media converter converts the electronic signal to an optical 
signal, and vice versa. A media converter is required at both ends, as shown in Figure 
12-17. The media converter is typically built into the network interface card. 
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TABLE 12-5 Optical Ethernet Numerics 


Numeric Description 

10BASE-F 10 Mbps Ethernet over fiber—generic specification for fiber 

10BASE-FB 10 Mbps Ethernet over fiber—part of the IEEE 10BaseF 
specification; segments can be up to 2 km in length 

10BASE-FL 10 Mbps Ethernet over fiber—segments can be up to 2 km in 
length; it replaces the FOIRL specification. 

10BASE-FP A passive fiber star network; segments can be up to 500 m in 
length 

100BASE-FX A 100 Mbps fast Ethernet standard that uses two fiber strands 

1000BASE-LX Gigabit Ethernet standard that uses fiber strands using 
longwavelength transmitters 

1000BASE-SX Gigabit Ethernet standard using short-wavelength transmitters 

10GBASE-R 10 gigabit (10.325 Gbps) Ethernet for LANs 

10GBASE-W 10 gigabit (9.95328 Gbps) Ethernet for WANs using OC-192 and 


Sonet Framing 


Multimode fiber—2 km length single mode—10 km length 


Source: Adapted From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 
819. Copyright © 2008 Pearson Education, Inc. Adapted by permission of Pearson Education, Inc., Upper 
Saddle River, NJ. 


Media Fiber Media Ethernet 


converter converter hub/switch 





FIGURE 12-17 An example of connecting a PC to an Ethernet hub or switch via fiber. 
(From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 820. 
Copyright © 2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, 
Inc., Upper Saddle River, NJ.) 


Two important issues to be considered when designing a fiber network are the 
guidelines for the following: 


Building distribution 
Campus distribution 


The following subsections discuss techniques for planning the fiber plant, the 
distribution of the fiber, and the equipment and connections used to interconnect the 
fiber. The first example is for a building distribution, the second for a campus distri- 
bution. 


Building Distribution 


Figure 12-18 shows an example of a simple fiber network for a building. Fiber lines 
consist of a minimum of two fibers, one for transmitting and one for receiving. Fiber 
networks work in the full-duplex mode, meaning that the links must be able to si- 
multaneously transmit and receive; hence, the need for two fibers on each link. 


470 —. Chapter12 e Optical Networking 


: 

l 
(A) | Fiber 

l 

l 

l 


l 
l 
l 
l 
l 
Cross Connect 
l 
l 
l 
l 
l 


Cross Connect 


Main REE e E E E E oeeaue == 
| IC 
Main Fiber Fiber 
Feed. (BD) l 


Horizontal 
Distribution j 





l 

l 

| Active 

i l Equipment 
Switch l C) l G) Horizontal 
PBX l Distribution 
Building Automation Aaaa a 

F.O. — Fiber Optic N) 


IC — Interconnect 


FIGURE 12-18 A simple fiber distribution in a building. 


Item A is the main fiber feed for the building. This is called a building distrib- Fiber Cross-connect 
ution (BD) fiber. The two fibers for the BD link terminate into a main fiber cross- Optical patch panel used to 
connect (item B). A fiber cross-connect is the optical patch panel used to connect the interconnect fiber cables 
fiber cables to the next link. The fiber cross-connect typically uses mechanical splices 
to make the fiber connections. 

Items C and E represent the active equipment in the main distribution closet in 
the building. The active equipment could be a router, switch, or telephone PBX (pri- 
vate branch exchange). Item D shows the jumpers connecting the main fiber cross- 
connect (item B) to the active equipment (item C). 

The active equipment will need some type of optical interface for the opti- GBIC 
cal-electrical signal conversion, such as a GBIC (pronounced “gee-bick’’). This in- Gigabit interface converter 
terface is also called a SFP (Small Form factor Pluggable). GBIC is the gigabit 


ios belies as XENPAK 
interface converter used for transmitting and receiving higher-speed signals over fiber ee 

apa j a oe The ten gigabit interface 
optic lines. The optical-to-fiber interface used at ten gigabits (10 G) is called XEN- dapter 


PAK. GBIC and XENPAK modules are designed to plug into interfaces such as 
routers and switches. These modules are used to connect to other fiber optic systems 
such as 1000Base-SX and 1000Base-LX and 1OGBASE, and the XENPAK module 
supports 850, 1310, and 1550 fiber wavelengths. The choice of the interface depends pc 
on the data rate selected and the type of active equipment being used. Figure 12-19 — Intermediate distribution 
shows an example of a XENPAK module. closet 

Items F and G in Figure 12-18 show the two fiber pairs patched into the main 
fiber cross-connect connecting to the intermediate distribution closet (IDC). These 
fibers (F and G) are called the interconnect (IC) fibers. The fibers terminate into the 
IDC fiber cross-connects (items H and I). 

Items J and K are fiber jumpers that connect the fiber cross-connect tothe IDC per cross-connect (item B) 
active equipment. Once again, the active equipment must have a GBIC or some other to the active equipment 
interface for the optical—electrical signal conversion. (item C) 


IC 

Interconnect fibers branch 
exchange—item D shows the 
jumpers connecting the main 
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FIGURE 12-19 The Cisco (a) GBIC and (b) 10GBASE XENPAK module (courtesy of Cisco). 


A general rule for fiber is that the distribution in a building should be limited to 
“2 deep.” This means that a building should only have the main distribution and the 
intermediate distribution that feeds the horizontal distribution to the work area. 

Figure 12-20 (a) and (b) illustrate an example of the “2-deep” rule. Figure 
12-20 (a) shows an example of a building distribution that meets the “2-deep” rule. 
The IDC (intermediate distribution closet) is at the first layer, and the horizontal dis- 
tribution (HD) is at the second layer. An example of a fiber distribution that does not 
meet the “2-deep” rule is shown in Figure 12-20 (b). In this example, the horizontal 
distribution (HD) and work area are 3-deep, or 3 layers from the building’s main 
distribution. 
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FIGURE 12-20 Examples of the “2-deep” rule: (a) the distribution meeting the 
requirement; (b) the distribution not meeting the requirement. 


Campus Distribution 


Figure 12-21 shows a map of the fiber distribution for a campus network. This map 
shows how the fiber is interconnected and data is distributed throughout the campus 
and is called a logical fiber map. Another style of map often used to show the fiber 


Optical Networking 


distribution is a physical fiber map as shown in Figure 12-22. This map shows the Physical Fiber Map 
routing of the fiber but also shows detail about the terrain, underground conduit, and Shows the routing of the 
entries into buildings. Both map styles are important and necessary for documenta- fiber but also shows detail 
tion and planning of the fiber network. This material focuses on the documentation about the terrain, l 
provided in the logical fiber map. underground conduit, and 
entries into buildings 
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FIGURE 12-21 A logical fiber map. 


Referring to the logical fiber map in Figure 12-21, this campus network hastwo mm 
connections to the Telco, the primary Telco demarcation (item A) in building 1 and Multimode 
the secondary Telco demarcation (item B) in building 2. These two Telco connections 
provide for redundant Internet and wide area network data services. If something 
happens in building 1 that shuts down the external data services, then Internet and 
WAN data traffic can be switched to building 2. Also data traffic can be distributed Backbone 
over both connections to prevent bottlenecking. Buildings 1 and 2 are interconnected Main fiber distribution 
with 36 multimode (mm) and 48 single-mode (sm) fibers. This is documented on the 
line interconnecting buildings | and 2 (item C) and written as 36/48 (item D). The 
green dotted line between buildings 1 and 2 indicates the backbone or main fiber dis- 
tribution for the campus network. The bulk of the campus network data traffic trav- 
els over these fibers. The campus backbone (green dotted line) also extends from 
building 2 to building 4 and from building 3 to building 5. 

This setup enables the data to be distributed over the campus. For example, data 
traffic from the primary Telco demarcation (item A) reaches building 12 by traveling 
via fiber through buildings 1-3-5-11-12. If the building 3 connection is down, then 
data traffic from the primary Telco demarcation can be routed through buildings 1-2- 
4-7-6-5-1 1-12. What happens to the data traffic for building 12 if building 5 is out of 
operation? In this case, data traffic to/from buildings 11 and 12 is lost. 

Item E shows a fiber connection to/from buildings 4 and 10. This fiber bundle 
provides an alternative data path from the primary Telco demarcation to the other side 
of the campus network. 


sm 
Single mode 
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FIGURE 12-22 An example of a physical fiber map (courtesy of Palo Alto Utilities). 


The cabling between buildings is a mix of multimode and single-mode fiber. 
The older fiber runs a 12/12 cable (12 multimode/12 single-mode). Fiber cables are 
bundled in groups of 12 fibers. For example, a 12/12 fiber will have two bundles, one 
bundle of multimode and one bundle of single mode fiber. A 36/48 cable will have 3 
bundles of multimode and 4 bundles of single mode fiber. Each bundle of fibers is 
color-coded as listed in Table 12-6. For example, in a 36/48 fiber cable, the 3 bundles 
of multimode are in loose tubes that are color coded Blue/Orange/Green. The four 
bundles of single mode are in loose tubes that are color coded Brown/Slate/ 


White/Red. 


TABLE 12-6 The Fiber Color Code for the Twelve Fibers in a Bundle 


Pair Color 

1/2 Blue/Orange 
3/4 Green/Brown 
5/6 Slate/White 
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Pair Color 


7/8 Red/Black 
9/10 Yellow/Violet 
11/12 Rose/Aqua Marine 


In this example, the newer fiber cabling installations were run with a 36/48 and 
24/48 mix. Why the difference? The main reason is economics. The cost per foot (me- 
ter) of the new fiber is cheaper, so more fiber can be placed in a cable for the same 
cost per foot. 

The fiber connecting the buildings is typically run either in PVC conduit, which 
makes it easy to add or remove fiber cables, or in trenches or tunnels. Running fiber 
in trenches is very expensive and significantly increases the installation cost. (Note: 
Network administrators need to be aware of any trenches being dug on campus.) Even 
if the budget doesn’t allow for buying fiber at the time, at least have a conduit and pull 
line installed. 

Fiber provides substantially increased bandwidth for building and campus net- 
works and can easily handle the combined traffic of PCs, switches, routers, video, and 
voice services. Fiber has greater capacity, which enables faster transfer of data, min- 
imizes congestion problems, and provides tremendous growth potential for each of 
the fiber runs. 

Another important application of optical Ethernet is extending the reach of the 
Ethernet network from the local and campus network out to the metropolitan and 
wide area networks. Essentially, optical networking is introducing Ethernet as a vi- 
able WAN (wide area network) technology. Extending Ethernet into a wide area net- 
work is a seamless integration of the technologies. The Ethernet extension into the 
WAN simply requires optical adapters such as a GBIC (gigabit interface converter) 
and two fiber strands, one for transmitting and one for receiving. Conventional high- 
speed Ethernet local area networks operating over fiber use the numerics listed in 
Table 12-6 for describing the network configuration. 


12-6 SYSTEM DESIGN AND OPERATIONAL ISSUES 


When designing a fiber optic transmission link, the primary performance issue is the 
bit error rate (BER) for digital systems and the carrier-to-noise ratio (C/N) for analog 
systems. In either case, performance will degrade as the link length increases. As 
stated in section 12-3, attenuation and dispersion are the two distance-limiting fac- 
tors in optical transmissions. The distance limit is the span length at which the BER 
or C/N degrades below some specified point. 

From an engineering point of view, there are two different types of environ- 
ments for fiber links. These are long-haul and local area networks (LANs). A long- 
haul system is the intercity or interoffice class of system used by telephone companies 
and long-distance carriers. These systems typically have high channel density and 
high bit rate, are highly reliable, incorporate redundant equipment, and involve ex- 
tensive engineering studies. LANS take a less strict position on the issues stated un- 
der long-haul applications. They typically have lower channel capacity and minimal 
redundance and are restricted to building-to-building or campus environments. Some 
LANs are becoming very large, including metropolitan area and wide area networks; 
as such, they usually rely on long-haul carriers for their connectivity. 
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From a design standpoint, those involved in long-haul work actually perform 
the studies on a per-link basis. LANs typically are prespecified and preengineered as 
to length, bit-rate capability, performance, and so on. The following is an example of 
a system designed for an installation typical of a LAN or a short-distance communi- 
cation link. 

In this example, each of the many factors that make up the link calculation, 
power budget, or light budget is discussed along with its typical contribution. A min- 
imal received signal level (RSL) must be obtained to ensure that the required BER be 
satisfied. For example, if the minimum RSL is -40 dBm for a BER of 10 ”, then this 
value is the required received optical power. If after the initial calculations are com- 
pleted the projected performance is not as expected, then go back and adjust any of 
the parameters, recognizing that there are tradeoff issues. 

Refer to the system design shown in Figures 12-23 and 12-24 for the list that 
follows: 


1. Transmitter power output: A value usually obtained from the manufacturer’s 
specification or marketing sheet. Caution: Be sure the value is taken from the 
output port of the transmit module or rack. This is point 1 on Figure 12-24. This 
is the point where the user can access the module for measurement and testing. 
Otherwise the levels can be off as much as 1 dB due to pigtail or coupling losses 
in between the laser or LED and the actual module output. 

2. Cable losses: The loss in dB/km obtained from the cable manufacturer’s sheet. 

This value is multiplied by the length of the cable run to obtain the total loss. 
An example of this calculation is provided in Example 12-1. 
Note that the actual fiber length can exceed the cable run length by 0.5 percent 
to 3 percent due to the construction of the fiber cable (in plastic buffer tubes). 
Fiber cables are loosely enclosed in buffer tubes to isolate the fiber from con- 
struction stress when the cable is pulled. 

3. Splice losses: Values dependent on the method used for splicing as well as the 
quality of splicing provided by the technician. Losses can vary from 0.2 dB to 
0.5 dB per splice. 

4. Connector losses: A value depending on the type and quality of the connector 
used as well as the skill level of the installer. Losses can vary from 0.25 dB to 
0.5 dB. 

5. Extra losses: A category used for miscellaneous losses in passive devices such 
as splitters, couplers, WDM devices, optical patch panels, and so on. 

6. Operational margin: Accounts for system degradation due to equipment ag- 
ing, temperature extremes, power supply noise and instability, timing errors in 
regenerators, and so on. 


Backhoe Fading 7. Maintenance margin: Accounts for system degradation due to the addition of 

Splice loss introduced by link splices, added losses to wear and misalignment of patch cords and con- 

repairing a fiber cable dug nectors, and so on. This includes the loss generated from repairing cables that 

up by a backhoe have been dug up by a backhoe. The term backhoe fading is used to indicate 
that the system has had total loss of data flow because the fiber cable has been 
dug up by a backhoe. 


8. Design receive signal power: A value obtained from summing the gains and 
losses in items 1—7. This value should exceed the specified received signal level 
(RSL), as specified in item 10. 
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ATTENUATION OR LINK LOSS 


Sample system 


Transmitter power output (module, not LD or LED) —15 dBm 
Losses: Cable, 18.6 Mi/30 km @ 0.4 dB/km 12.0 
8 splices @ 0.2 dB ea 1.6 
2 connectors @ 0.5 dB ea 1.0 
Extra for two pigtails and inside cable 2.0 
Total losses 16.6 16.6 dB 
Received signal power —31.6 dBm 
[6] Operational margin 3.0 
Maintenance margin 3.0 
Total margin 6.0 6.0 dB 
Design receive signal power —37.6 dBm 
[9] Minimum receiver sensitivity(RSL) for 107°? BER 
(module, not APD or PIN) —40.0 dBm 
Extra margin 2.4 dB 
TX power —15 dBm 
Losses 
Power —27 dBm 
budget/ 
system 
a Rec. signal —31.6 dBm 
Receiver 
dynamic Margins 
range 
Design rec. signal —37.6 dBm 
Extra 
Rec. sensitivity for 10~? BER —40.0 dBm 
—42.0 dBm 


FIGURE 12-23 System design. (From Modern Electronic Communication 9/e, by J.S. 
Beasley & G. M. Miller, 2008, p. 810. Copyright © 2008 Pearson Education, Inc. Reprinted 
by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


9. Receiver sensitivity for a 10 -9 BER: The minimum RSL for the receiver to 
perform at the specified BER. If the design receive signal power (item 8) does 
not meet this requirement, then adjustments must be made. For example, trans- 
mit power could be increased, splice loss estimates reduced, a more optimistic 
maintenance margin could occur, and so on. Also the receiver may have a max- 
imum RSL, so a system may require attenuators to decrease the RSL so that it 
falls within a specified operating range (receiver dynamic range). 
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Inside cable vault to equipment room 


Cabl It spli 
TX module pore ae Rear RX module 
18.6 miles/30 km 
7 reels of cable o o 





LD X x PIN 
“LED [—~—*—_»_»__e_'_e «ee _} | “APD 

(Optical patch) 

Pigtail or plenum cable 

Output connector Input connector 
Pigtail or plenum cable 
(Optical patch) 

|] Reference to loss value locations & components (see pages 810-811) Optical attenuator 


Splices (if required) 


O and X On some units, these points are the same 


FIGURE 12-24 A graphical view of the system design problem shown in Figure 12-23. 
(From Modern Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 812. 
Copyright © 2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, 
Inc., Upper Saddle River, NJ.) 


10. Extra margin: The difference between the design receive signal power (item 
8) and the receiver sensitivity (item 9). Item 8 should be greater than item 9; for 
example, -37.6 dBm is larger than -40 dBm. One or two dB is a good figure. 

11. Optional optical attenuator: A place where an optional attenuator can be in- 
stalled and later removed as aging losses begin to increase. 


Example 12-1 


Determine the loss in dB for a 30-km fiber cable run that has a loss of 0.4 dB/km. 


Solution 
total cable loss = 30 km x 0.4 dB/km = 12 dB 


A graphical view of the previous system design problem is shown in Figure 12-21. 
Figure 12-25 provides another way to graphically describe the system design prob- 
lem. Notice that the values are placed along the distance covered by the fiber. This 
provides the maintenance staff and the designer with a clear picture of how the sys- 
tem was put in place. 
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FIGURE 12-25 An alternative view of the system design problem. (From Modern 
Electronic Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 812. Copyright © 


2008 Pearson Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper 
Saddle River, NJ.) 


12-7 SAFETY 


Any discussion of fiber optics or optical networking is not complete unless it ad- 
dresses safety issues, even if only briefly. As the light propagates through a fiber, two 
factors will further attenuate the light if there is an open circuit: 


1. A light beam will disperse or fan out from an open connector. 

2. If a damaged fiber is exposed on a broken cable, the end will likely be shat- 
tered, which will considerably disperse the light. In addition, there would be a 
small amount of attenuation from the strand within the cable, plus any connec- 
tions or splices along the way. 
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However, there are two factors that can increase the optical power at an exposed 
fiber end. 


1. There could be a lens in a pigtail that could focus more optical rays down the 
cable. 

2. In the newer DWDM systems, there will be several optical signals in the same 
fiber; although separate, they will be relatively close together in wavelength. 
The optical power incident on the eye will then be multiplied. 


There are two factors to be aware of: 


1. The eye can’t see fiber optic communication wavelength, so there is no pain or 
awareness of exposure. However, the retina can still be exposed and damaged. 
(Refer to Figure 12-3, the electromagnetic spectrum.) 

2. Eye damage is a function of the optical power, wavelengths, source or spot di- 
ameter, and the duration of exposure. 


So for those working on fiber optic equipment: 


1. DO NOT EVER look into the output connector of energized test equipment. 
Such equipment can have higher powers than the communication equipment it- 
self, particularly OTDRs. 

2. If you need to view the end of a fiber, ALWAYS turn off the transmitter, partic- 
ularly if you don’t know whether the transmitter is a laser or LED, given that 
lasers are higher-power sources. If you are using a microscope to inspect a fiber, 
the optical power will be multiplied. 


From a mechanical point of view: 


1. Good work practices are detailed in safety, training, and installation manuals. 
READ AND HEED. 

2. Be careful with machinery, cutters, chemical solvents, and epoxies. 

3. Fiber ends are brittle and will break off easily, including the ends cut off from 
splicing and connectorization. These ends are extremely difficult to see and can 
become “lost” and/or easily embedded in your finger. You won’t know until 
your finger becomes infected. Always account for all scraps. 

4. Use safety glasses specifically designed to protect the eye when working with 

fiber optic systems. 

Obtain and USE an optical safety kit. 

6. Keep a CLEAN and orderly work area. 


A 


In all cases, be sure the craft personnel have the proper training for the job! 
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12-8 TROUBLESHOOTING COMPUTER NETWORKS 
(THE OTDR) 


There are several techniques to measure and troubleshoot fiber links. A common tech- 
nique is to use an optical power meter to determine power loss. Another tool used is 
a Visual Fault Locator (VFL), which is a device that shines light down the fiber to 
help locate broken glass. Figure 12-26 (a) and (b) are traces obtained from an optical 
time-domain reflectometer (OTDR) for two different sets of multimode fibers. In 
field terms, this is called “shooting” the fiber. The OTDR sends a light pulse down 
the fiber and measures the reflected light. The OTDR enables the installer or mainte- 
nance crew to verify the quality of each fiber span and obtain some measure of per- 
formance. The X axis on the traces indicates the distance, whereas the Y axis indicates 
the measured optical power value in dB. Both OTDR traces are for 850-nm multi- 
mode fiber. 

In regard to Figure 12-26 (a), point A is a “dead” zone or a point too close to 
the OTDR for a measurement to be made. The measured value begins at about 25 dB 
and decreases in value as the distance traveled increases. An event, or a disturbance 
in the light propagating down the fiber, occurs at point B. This is an example of what 
a poor-quality splice looks like (in regard to reflection as well as insertion loss). Most 
likely, this is a mechanical splice. The same type of event occurs at points C and D. 
These are also most likely mechanical splices. Points F and G are most likely the 
jumpers and patch-panel connections at the fiber end. The steep drop at point H is 
actually the end of the fiber. Point J is typical noise that occurs at the end of an 
“unterminated” fiber. Notice at point G that the overall value of the trace has dropped 
to about 17 dB. There has been about 8 dB of optical power loss in the cable in a 
1.7 km run. 

An OTDR trace for another multimode fiber is shown in Figure 12-23 (b); the 
hump at point A is basically a “dead” zone. The OTDR cannot typically return accu- 
rate measurement values in this region. This is common for most OTDRs, and the 
dead zone will vary for each OTDR. The useful trace information begins at point B 
with a measured value of 20 dB. Point C shows a different type of event. This type of 
event is typical of coiled fiber, or fiber that has been tightly bound, possibly with a 
tie-wrap, or that has had some other disturbance affecting the integrity of the fiber. 
Points D and F are actually the end of the fiber. At point D the trace level is about 19 
dB for a loss of about 1 dB over the 150-m run. Point G is just the noise that occurs 
at the end of a “terminated” fiber. 


Visual Fault Locator 
(VFL) 

Device that shines light 
down the fiber to help locate 
broken glass 


OTDR 

Sends a light pulse down the 
fiber and measures the 
reflected light, which 
provides a measure of 
performance for the fiber 


Event 

A disturbance in the light 
propagating down a fiber 
Span that results in a 
disturbance on the OTDR 
trace 
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FIGURE 12-26 An OTDR trace of an 850-nm fiber. (From Modern Electronic 
Communication 9/e, by J.S. Beasley & G. M. Miller, 2008, p. 814. Copyright © 2008 Pearson 
Education, Inc. Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 
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SUMMARY 


Chapter 12 has introduced the field of fiber optics and optical networking. The chap- 
ter has provided examples using fiber to interconnect LANs in both a building and a 
campus network. The major topics that the student should understand include the fol- 
lowing: 


e The advantages offered by optical networking 

e The properties of light waves 

e The physical and optical characteristics of optical fibers 

e Attenuation and dispersion effects in fiber 

e The description of the common techniques used to connect fiber 

e The usage of fiber optics in local area networks (LANs), campus networks, and 
wide area networks (WANs) 

e System design of optical networks 

e Safety considerations when working with fiber 

e Analysis of OTDR waveforms 


QUESTIONS AND PROBLEMS 


Section 12-1 


1. List the basic elements of a fiber optic communication system. 
2. List five advantages of an optical communications link. 


Section 12-2 


Define refractive index. 

What are the commonly used wavelengths in fiber optic systems? 

What part of an optical fiber carries the light? 

A measure of a fiber’s light acceptance is 

Define pulse dispersion. 

What are the typical core/cladding sizes (in microns) for multimode fiber? 
What is the typical core size for single-mode fiber? 

Define mode field diameter. 





2 ee os eS 


jà 


Section 12-3 


11. What are the two key distance-limiting parameters in fiber optic transmissions? 
12. What are the four factors that contribute to attenuation? 

13. Define dispersion. 

14. What are three types of dispersion? 

15. What is meant by the zero-dispersion wavelength? 

16. What is a dispersion compensating fiber? 
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Section 12-4 


17. What are the two kinds of light sources used in fiber optic communication 
systems? 

18. Why is a narrower spectra advantageous in optical systems? 

19. Why is a tunable laser of importance in optical networking? 

20. What is the purpose of an optical attenuator? 

21. List two purposes of optical detectors. 

22. What is the advantage of fusion splicing over mechanical splicing? 


Section 12-5 


23. Define: (a) FITC; (b) FTTH; (c) FTTB; (d) FTTD. 

24. What is the purpose of a GBIC? 

25. What is the “2-deep” rule? 

26. What is the purpose of a logical fiber map? 

27. What are the typical maximum lengths for (a) multimode and (b) single-mode 
fiber? 

28. What is FDDI? 


Section 12-6 


29. What is the primary performance issue in a fiber optic transmission link? 

30. What are the two different types of environments for fiber links? 

31. Define RSL. 

32. What steps can be taken if the designed receive signal power does not meet the 
minimum RSL requirement? 

33. What should be done if the receive signal level exceeds the maximum RSL? 

34. What is a receiver dynamic range? 


Section 12-7 


35. Why is safety an important issue in optical networking? 





Section 12-8 


36. Examine the OTDR trace provided in Figure 12-27. Explain the trace behavior 
of points A, B, C, D, and E. 
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FIGURE 12-27 Figure for Problem 36. (From Modern Electronic Communication 9/e, by 
J.S. Beasley & G. M. Miller, 2008, p. 833. Copyright © 2008 Pearson Education, Inc. 
Reprinted by permission of Pearson Education, Inc., Upper Saddle River, NJ.) 


Critical Thinking 


37. A campus network is planning to put fiber optic cables in to replace outdated 
coaxial cables. They have the choice of putting in single-mode, multimode, or 
a combination of single—multimode fibers in the ground. Which fiber type 
should they select? Why? 

38. The networking cables for a new building are being installed. You are asked to 
prepare a study about which cable type(s) should be used. Discuss the issues 
related to the cable selection. 
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CHAPTER OUTLINE 


13-1 Introduction 

13-2 The Basics of Voice over IP 
13-3 Voice over IP Networks 
13-4 Quality of Service 


OBJECTIVES 


e Examine the technologies used in the genera- e 


tion, management, and transport of voice over 
IP calls 


e Investigate the ways voice over IP telephony ° 


can be incorporated into a network 


13-5 Analyzing VoIP Data Packets 
Summary 


Questions and Problems 


Develop an understanding of the key quality 
of service issues associated with voice over IP 
telephony 

Examine the data packets generated in a voice 
over IP call 


KEY TERMS 
VoIP RTCP weighted random early 
PBX packet sequence number discard (WRED) 
PSTN timestamp queuing 
signaling tie line first queued 
SS7 TDM FIFO 
H.323 VoIP gateway weighted fair queuing 
SIP VoIP relay (WFQ) 
SSIP QoS CBWEQ 
virtual tie line jitter PQ 
PCM buffer CQ 
CODEC network latency spit 
RTP 
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13-1 INTRODUCTION 


VoIP Voice over IP (VoIP), or IP telephony, is the transport of phone conversations over 

Voice over IP telephony packet networks. Many companies and individuals are taking advantage of the de- 
velopment of new technologies that support the convergence of voice and data over 
their existing packet networks. The network administrator can also see an additional 
benefit with the cost savings using a converge voice/data network. This has created a 
new role for the network administrator, that of a telecommunications manager. The 
network administrator must not only be aware of the issues of data transport within 
and external to the network, but also the issues of incorporating voice data traffic into 
the network. 

This chapter examines the basics of building voice over IP networks. The tech- 
nologies, the data transport, and the quality of service issues are examined. The me- 
chanics of transporting voice data traffic over an IP network are presented in section 
13-2. This includes encoding the voice signal, transporting the digitized voice data, 
and interfacing the data via a gateway to another IP network. Section 13-3 presents 
an overview of assembling voice over IP networks. This section examines three dif- 
ferent techniques for incorporating an IP telephony solution. 

Many quality-of-service issues arise with the deployment of a voice over IP 
network. For example, the packet arrival time is not guaranteed in an IP network; 
therefore, a noise problem called jitter is introduced. This and other quality-of- 
service issues are examined in section 13-4. Voice over IP data packets are examined 
in section 13-5. This section examines the data packets generated when an IP call is 
placed and how codes are used to identify the different types of data packets being 
transported. 


13-2 THE BASICS OF VOICE OVER IP 


The objective of this section is to present an overview of the technologies used in the 
generation, management, and transport of voice over IP (VoIP) calls. The basic VoIP 
system begins with a telephone. IP telephones are available as standalone units or as 
software running on a PC. The PC requires a microphone and a speaker to support the 
telephone call. 


PBX Standard telephones can also be used in IP telephony if the telephones connect 
Private branch exchange— to a private branch exchange (PBX) that supports IP telephony. The PBX is a user’s 
the user's own telephone own telephone system. It manages the internal switching of telephone calls and also 
system interfaces the user’s phone to the PSTN (public switched telephone network—the 


telephone company or Telco). The interface of the IP telephone system to the PSTN 
is called a gateway. 

The gateway’s function is to provide an interface for IP telephony calls to the 
PSTN or to interface one IP telephone system with another. This requires that the 


PSTN 
Public switched telephone 
network—the telephone 


i voice data be packaged for transport over the IP network or the PSTN. The gateway 
Signaling also makes sure that the proper signaling is included for the voice data packet trans- 
Used to establish and port. Signaling is used to establish and terminate telephone calls and to manage many 
terminate telephone calls of the advanced features available with telephones. 

SS7 The PSTN uses a signaling technique called SS7 that provides enhanced 


Signaling technique used by features: 


the PSTN e Toll-free services 
e Worldwide telecommunications 
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e Enhanced call features (for example, call forwarding and three-way calling) 
e Local number portability 


IP telephony uses different signaling techniques. These are H.323, SIP, and vir- H.323 
tual tie lines. H.323 is a suite of protocols that define how voice and video are trans- Suite of protocols that 


ported over IP networks. H.323 works with delay-sensitive traffic (for example, voice defines how voice and video 


and video) to help establish a priority for timely packet delivery, critical for real-time a€ transported over IP 
applications. The bottom line is that the packets must arrive ina timely manner toen- networks 
sure quality reproduction of the voice or video. 

The Session Initiation Protocol (SIP) was developed by the Internet Engineer- SIP 


ing Task Force (IETF) to manage multimedia packet transfers over IP networks. SIP Session Initiation Protocol 


runs in the application layer of the OSI model and uses the connectionless protocol 
UDP for packet transport. SIP is responsible for establishing and terminating IP tele- 
phony calls and is responsible for transferring the call. A secure version of SIP has 
been developed called SSIP. SSIP provides for end-to-end secure communications 
by requiring user authentication. 

3COM has introduced a technique called virtual tie line for its NBX network Virtual Tie Line 
telephony. Virtual tie lines simplify the interconnection between the IP-PBX and the Simplifies the 


SSIP 


Protocol 


Secure Session Initiation 


PSTN. The advantage of the NBX virtual tie line is its simplicity compared to the interconnection between the 


H.323. The disadvantage is that the NBX virtual tie line is unique to 3COM, although IP-PBX and the PSTN 
there is talk that other companies will start offering similar solutions. 
The next part of this section addresses the issues of transporting voice (tele- 
phone call) over an IP network. It was previously mentioned that VoIP telephone calls 
can be made from phone to phone, PC to phone, and PC to PC. This is shown in Fig- 
ure 13-1. The telephones connect to the VoIP gateway, and the computers connect di- 
rectly to the IP network (intranet or Internet). A popular choice for Internet telephony 
is Skype. This service offers free global telephony service via the Internet to another 
Skype user. 


Internet or 


Intranet 





IP Telephone 


FIGURE 13-1 The various ways of placing voice over IP telephone calls. 


The first step for preparing the VoIP signal for transport is to digitize the ana- PCM 
log voice to a PCM (pulse code modulation) digital signal (the PCM data stream). Pulse code modulation 
This conversion is taken care of inside the digital telephone, computer, or PBX. 
Processors are used to examine the PCM data stream to remove any silent spaces. 
Transporting data packets that contain no information (that is, silence) is a waste of 
bandwidth; therefore, any digitized silence is removed. The remaining PCM data is 
then sent to a CODEC. 
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CODEC 
Encodes, compresses, and 
decodes the data 


RTP 
Real-Time Protocol 


RTCP 
Real-Time Control Protocol 


Packet Sequence 
Number 

Used to keep track of the 
order of the data packets 


Timestamp 
Reproduces playback of the 


voice packets with the same 


time interval as they were 
recorded 


The purpose of the coder/decoder (CODEC) is to structure the PCM data for 
inputting into frames. This involves encoding, compressing, and decoding the data. 

The frames are then placed into one packet. A Real-Time Protocol (RTP) 
header is added to each frame. The RTP header provides the following: 


e Packet sequence number 
e Timestamp 


A companion protocol to RTP is RTCP, the Real-Time Control Protocol. The 
purpose of RTCP is to manage packet synchronization and identification and the 
transport of the data. 

The packet sequence number is used to keep track of the order of the data 
packets and to detect any lost packets. RTP uses UDP for transporting the data. There 
is always a chance that packets could be lost in a congested network or the packets 
could arrive out of order. The RTP packet sequence number enables a processor to re- 
assemble the data packets. Lost digital voice data packets will cause annoying pops 
and clicks when converted back to analog at the receiver. One technique is to fill in 
the blanks with a previously received data packet. An example of this is shown in Fig- 
ure 13-2. This technique helps minimize annoying pops and clicks. The substituted 
data packets are sometimes played back at a reduced volume to help smooth the 
transition. 


aaga 


(a 
EE EN E eS Wa LI 
(b) 


FIGURE 13-2 Reconstructing the data stream at the receiver if packets are missing: (a) 
the received data stream with missing packets; (b) the reconstructed data stream. 


Timestamps are assigned to the voice packets by RTP to provide the correct 
time intervals for a packet. The receivers use the timestamps to reproduce the play- 
back of the voice packets in the same time interval sequence as recorded. 

This section has examined the fundamental issues of voice over IP telephony, 
including the technologies needed for transporting voice calls. The next section ex- 
amines the steps for assembling a voice over IP network. 


13-3 VOICE OVER IP NETWORKS 


The advantages of converging voice traffic with existing data traffic are obvious. A 
company can have a considerable investment in routing data traffic both internally 
and externally to the home network. Internally, the company will have a substantial 
investment in installed twisted-pair cable and wall plates for computer networks. 
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Externally, a company might have network connections to remote sites via leased 
communication lines. It is a reasonable next step for the company to investigate com- 
bining voice traffic with the existing data traffic for connecting to external sites. How- 
ever, best practices dictate that voice and data traffic should remain separated within 
the LAN. This can be accomplished by establishing VLANs to support the voice traffic. 
(Refer to Chapter 9 for a discussion on VLANS.) 

This section examines three ways a company can implement voice over IP 
(VoIP) telephony into its network: 


1. Replace an existing PBX voice tie line (for example, a T1 circuit) with a VoIP 
gateway. 

2. Upgrade the company’s existing PBX to support IP telephony. 

3. Switch the company over to a complete IP telephone system. 


Replacing an Existing PBX Tie Line 


It is common practice for companies to use a PBX tie line to interconnect phone sys- 
tems at different locations. The location of the PBXs could be across town from each 
other, or across the country or the world. The same company could also have leased 
data lines to interconnect the same facilities. This is shown in Figure 13-3 (a). The 
PBXs at each site are interconnected with a T1 tie line for the purpose of transport- 
ing telephone calls between sites. In Figure 13-3 (b), the networks are configured as 
a wide area data network. The company must examine the following issues: 


e The company is having to lease separate lines for voice (phone) and data. 
e There are times when the telephone traffic is minimal and the data traffic move- 
ment could be improved if more bandwidth was occasionally available. 





Site A Site B 
Leased TI Circuit P 
es | es 
X 
Telephone Telephone 
(a) 
Computer "m 
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(b) 


FIGURE 13-3 (a) The traditional interconnection of PBXs between sites; (b) the 
interconnection of data networks between sites. 
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Tie Line 
Line used to interconnect 
PBXs 


TDM 


Time division multiplexing 


VoIP Gateway 

Provides the proper signaling 
of digitized voice data for 
transport over the IP 
network 


VoIP Relay 
Another name for a VoIP 
gateway 


A standard solution for combining voice and data networks is to multiplex the 
voice and data traffic over the same tie line (for example, a T1 connection). An ex- 
ample is shown in Figure 13-4. In this example, a technique called time division mul- 
tiplexing (TDM) is used to divide the available bandwidth of the line interconnecting 
the two networks to carry both data and voice. The problem with this is the voice 
bandwidth is reserved for a required number of phone calls even if the calls are not 
being made. Combining the two networks simplifies the transport, but it doesn’t nec- 
essarily improve the overall network performance. 


Site A Site B 


PBX PBX 


FIGURE 13-4 The use of multiplexing to combine the voice and data traffic for transport 
over a common T1 line. 


A VoIP solution addresses the limitations of the traditional TDM arrangement. 
Figure 13-5 shows the modified network. The PBXs are now connected to a VoIP 
gateway (also called a VoIP relay). The VoIP gateway is responsible for providing 
the proper signaling of the digitized voice data and encapsulating the data packets for 
transport over the IP network. The advantage of this arrangement is the networks can 
more efficiently use the available bandwidth. 

It is important to note that each site (see Figure 13-5) has a telephone connec- 
tion to the local telephone company via the public switched telephone network 
(PSTN). This connection is necessary so that the phone traffic can reach users outside 
the network. It is also important to note that this connection serves as a backup if the 
Internet connection goes down. 


Site A Site B 








Digital voice data Digital voice data 


Voice Over Voice Over 
IP Gateway IP Gateway 










FIGURE 13-5 The modification of the network to provide a voice over IP solution. 


492 Chapter13 œ» Voice over IP 





The advantages of this arrangement are as follows: 


e The voice and data traffic are combined for more efficient use of the network’s 
available bandwidth. 

e The sites can still use the existing PBX, telephones, and connections to the lo- 
cal PSTN. 


The potential disadvantage is that growth in data or voice bandwidth require- 
ments can impact the telephone (voice) quality of service. Few companies will be 
willing to sacrifice any quality associated with telephone calls just to implement a 
VoIP solution. (Note: Quality of service issues are examined in section 13-4.) 


Upgrading Existing PBXs to Support IP Telephony 


A company might decide that IP telephony should be used, but gradual steps should 
be taken toward IP telephony deployment. A solution would be for the company to 
upgrade its existing PBXs to support IP telephony. This enables the existing tele- 
phones to act like IP telephones and enable the IP telephones to place calls over the 
PSTN. Figure 13-6 illustrates an example of this voice over IP solution. 

Figure 13-6 shows that the company’s PBX has been replaced or upgraded to a 
PBX capable of supporting IP telephony. In this example, the company is running 
both conventional and IP telephones. Either of these phones can place telephone calls 
over the IP network or via the PSTN. The conventional telephones connect to the 
PBX in the traditional manner. The IP telephones connect to the PBX via a network 
switch. The PBX will have an IP call manager for placing and receiving calls. The 
gateway enables both IP and conventional phone calls to exit or enter the IP network. 
The PBX will have a connection to the PSTN to support traditional call traffic from 
conventional telephones. Table 13-1 outlines the advantages and disadvantages of up- 
grading the PBX. 


| EES \ 
To PSTN Telephone 
ES (=) 


IP Call Manager 


IP 
Network 





Data 
Network IP Telephone IP Telephone 


FIGURE 13-6 An example of modifying the PBX to provide a voice over IP solution. 
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TABLE 13-1 Advantages and Disadvantages of Upgrading the PBX 


Advantages Disadvantages 


Conventional telephones will now work with The cost of upgrading the PBX must 
IP telephony, so existing telephone hardware justify the potential benefit. 
doesn’t need to be replaced. 

Both PSTN and IP network voice traffic are Quality of service issues still exist. 
Supported. 

Data traffic is easily integrated with the 

telephone system. 

The IP telephones can use existing 

computer network twisted-pair cable and 

RJ-45 wall plates to connect the new IP 

telephones. 


Switching to a Complete IP Telephony Solution 


A company also has the option of switching completely to an IP telephone system. 
This requires the company to replace all its conventional telephones with IP tele- 
phones and/or PC telephones. The company’s PBX is replaced with an IP-based PBX, 
and a gateway is required for connecting the IP-PBX to the PSTN. Figure 13-7 shows 
this IP solution. 











IP 


Network To remote 


site 


IP Telephone 


Eo 
IP Telephone 


FIGURE 13-7 A complete IP telephony solution. 


Figure 13-7 shows the IP telephones connecting to the IP-PBX in much the 
same way computers connect to a switch in computer networking. The company’s IP- 
PBX connects to the remote site’s IP telephone network. The IP-PBX also contains a 
gateway that connects the IP-PBX to the PSTN. 

The advantage of a complete IP telephony solution is that the company can use 
the IP network for delivery of telephone calls within the company and to any remote 
site connected to the Internet or that supports VoIP. 

The disadvantages of a complete IP telephony solution are as follows: 


e There is a startup cost of replacing old telephones with IP hardware and/or soft- 
ware-based telephones. 

e Quality of service issues still exist. 

e The addition of new IP phones means there are new networked devices to man- 
age, meaning more work for the network administrator. 
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13-4 QUALITY OF SERVICE 


An important issue in the delivery of real-time data over a network (for example, QoS 
voice over IP) is quality of service (QoS). The following are QoS issues for a VoIP Quality of service 
network: 


e Jitter 
e Network latency and packet loss 
e Queuing 


This section examines each of these issues and how each affects the quality of 
real-time voice data delivery. 


Jitter 


Digitized voice data requires a fixed time interval between data packets for the signal Jitter 
to be properly converted back to an audible analog signal. However, there is a delay Produces a poorly 
problem with transported voice data over a packet network. Variability in data packet reconstructed signal at the 
arrival introduces jitter in the signal, which produces a poorly reconstructed signal "eceiver due to variability in 
at the receiver. For example, assume that a 1000 Hz tone is sent over a VoIP network. data packet arrival 
The tone is digitized at regular time intervals, assembled into frames and packets, and 
sent out as an RTP packet. Random delays in the packets’ travel to the destination re- 
sult in their arriving at irregular time intervals. The reproduced 1000 Hz analog tone 
will contain jitter because the arrival times for each data packet will vary. 
Figure 13-8 (a) shows an accurately reconstructed sine wave, and Figure 13-8 
(b) shows an unstable sine wave. This signal will contain significant distortion and 
may not even sound like a 1000-Hz tone at all. (Note: The bandwidth of a typical tele- 
phone call is 300-3000 Hz. The 1000 Hz tone was selected because it falls in the typ- 


ical bandwidth for voice.) 
(a) 
(b) 


FIGURE 13-8 An example of (a) an accurately reproduced sine wave and (b) a sine wave 
with jitter. 
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Buffer 

Temporary storage for 
holding data packets until it 
is time for them to be sent 


Network Latency 

The time it takes for data 
packets to travel from source 
to destination 


Weighted Random Early 
Discard (WRED) 

Network routers and switches 
are configured to 
intelligently discard lower 
priority packets 


Queuing 
Provides control of the data 
packet transfer 


First Queued 
Describing when the data 
packet arrives 


FIFO 
First in, first out 


Weighted Fair Queuing 
(WFQ) 

Used to determine what data 
traffic gets priority for 
transmission 
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Buffering the data packets long enough for the next data packet to arrive can 
minimize the effects of jitter. A buffer is temporary storage for holding data packets 
until it is time for them to be sent. The buffer enables the data packets to be output at 
regular time intervals, thereby removing most of the jitter problem. Buffering works 
as long as the arrival time of the next packet is not too long. If the arrival time is too 
late, the data packet might have to be considered “lost” because the real-time data 
packets can’t wait too long for the buffered packet without affecting the quality of the 
reconstructed signal. Another issue is that the buffering stage introduces delay, and 
having to wait additional time only introduces more delay. 


Network Latency 


It takes time for a data packet to travel from the source to the destination. This is 
called network latency, and it becomes an important issue in VoIP data traffic. Tele- 
phones (both traditional and IP) feed a portion of the user’s voice into the earpiece. 
If the round-trip delay of the voice data is too lengthy (> 50 ms), then the user will 
begin to hear an annoying echo in the earpiece. 

Delay issues can be minimized by making sure the network routers and 
switches are optimized for VoIP data traffic. The VoIP network can be configured so 
that high-priority data packets (for example, voice packets) are transported first over 
the IP network. Nonsensitive data packets are given a low-priority status and are 
transmitted only after the high-priority packets are sent. 

Another source of packet delay is network congestion. This can have a nega- 
tive effect on any type of data traffic but is very disruptive to VoIP telephony. The net- 
work administrator must make sure that congestion problems are avoided or at least 
minimized and could have the option of configuring the routers to optimize routes for 
IP telephony. 

One technique used to minimize congestion problems is to configure the net- 
work routers and switches to intelligently discard lower-priority packets. This tech- 
nique is called weighted random early discard (WRED). This is done to maintain 
acceptable data traffic performance of an integrated data and VoIP network. A 
dropped TCP/IP data packet will typically cause the TCP data packet flow to slow 
down. Recall from Chapter 5 that TCP issues a window size value to the number of 
data packets that the receiver can accept without acknowledgement. If a packet is lost, 
the window size decreases until an acceptable window size is obtained that doesn’t 
produce lost data packets. As a result, the intentionally dropped data results in a slow- 
down in data traffic and a less congested network. 


Queuing 


Queuing is another technique the network administrator can use to improve the qual- 
ity of service of data traffic by controlling the transfer of data packets. The adminis- 
trator must identify the data traffic that must be given priority for transport. The 
queuing decision is made when the data packet arrives, 1s first queued, and placed in 
a buffer. There are many types of queuing arrangements, with the most basic being 
FIFO (first in, first out). In this case, the data packets are placed in the queue on ar- 
rival and transmitted when the channel is available. 

A technique called weighted fair queuing (WFQ) is available on many routers 
and is used to determine what data traffic gets priority for transmission. This tech- 
nique applies only if the buffer is full, and a decision must be made as to which data 


e Voice over IP 


a 


packet goes first. WFQ can be modified to provide a class-based weighted fair queu- CBWFQ 
ing (CBWFQ). This improvement enables the network administrator to define the Class-based weighted fair 
amount of data traffic allocated to a class of data traffic (for example, VoIP). queuing 
Other queuing techniques are PQ and CQ. Priority queuing (PQ) is used to PQ 
make sure the important data traffic gets handled first. Custom queuing (CQ) reserves Pronty-alediia 
a portion of the channel bandwidth for selected data traffic (for example, VoIP traf- 
fic). This is a decision made by the network administrator based on experience with CQ 
the network. The problem with CQ is it doesn’t make allowances for other traffic Custom queuing 
management when the channel is full; therefore, queuing techniques such as WFQ or 
WRED can’t be used to manage the data flow. Table 13-1 lists the queuing techniques 
available to the network administrator. 


TABLE 13-2 Queuing Techniques 


FIFO First in, first out 

WFQ Weighted fair queuing 

CBWFW Class-based weighted fair queuing 
PQ Priority queuing 

cQ Custom queuing 


Two additional areas for consideration in regards to quality of service for VoIP 
are incorporating the use of VLANs within your network to separate voice and data 
traffic and securing your voice traffic: 


e VLANSs for VoIP: When deploying VoIP on LANs, it is recommended that a 
separate VLAN be created on your network for IP telephony. The advantage of 
this is the voice and data networks are kept separate. Network slowdowns or se- 
curity threats to the data network will not affect the VoIP network or are at least 
kept to a minimum. 

e Securing the VoIP network: The traditional PBX used in telephony is not typ- Spit 
ically vulnerable to the security threats that occur on data networks. However, Spam over Internet 
VoIP networks are vulnerable to similar security threats. The most serious telephony 
threat to VoIP traffic is denial of service (DoS) attacks. DoS attacks work by 
flooding the network with server requests or excessive data traffic. The result 
is a severe degradation in the quality of service available for VoIP telephony. 

Another threat to the quality of service is spam over Internet telephony (spit). 
In this case, the VoIP network can be saturated with unsolicited bulk messages 
broadcast over the VoIP network. 


This section has presented the key quality of service issues in the delivery of 
real-time data (VoIP). The network administrator must be aware of these techniques 
and how each can be used to improve the VoIP quality of service. The administrator 
must also be aware of the tradeoff that optimizing an IP network for VoIP traffic can 
have on the data network. 


13-5 ANALYZING VoIP DATA PACKETS 


This section examines the packets exchanged during VoIP calls using both voice over 
Ethernet and voice over IP. The VoIP data collected for the voice over Ethernet dis- 
cussion were generated from an IP telephone network that contained two IP telephones 
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and a 3COM NBX call processor. Figure 13-9 shows a block diagram of the setup for 
the circuit. The communications used for these phones 1s running at Layer 2, the data 
link layer. The IP phones and the call processor were configured with IP addresses, 
but the phones are in the same LAN, and IP routing was not necessary. This setup is 
similar to the phone setup in an office or a small business. The MAC addresses for 
the networking equipment are listed in Table 13-3. 


IP 
Telephone 


IP 


CAT 6 
Telephone 


CAT 6 









= 
o| | 000000 | | CO 









3 COM NBX 


#1002 
00-EO-BB-OD-87-FD MAC 
OO-EO-BB-06-A5-5D 00-E@-BB-O7-99-OF 


FIGURE 13-9 The setup used to collect the VoIP telephone call data packets. 


TABLE 153-3 MAC Addresses for Networking Equipment Used When 
Gathering VolP Data Packets 


Networking Device MAC Address 

Phone (#1002) 00-E0-BB-OD-87-FD 
Phone (#1003) 00-E0-BB-07-99-OF 
NBX call processor 00-E0-BB-06-A5-5D 


There are some basic codes used by the NBX call processor to identify the 
packet running over the Ethernet network. These codes identify the type of message 
that is being issued, such as voice data packets, request packets, and acknowledge- 
ments. These codes, listed and described in Table 13-4, will be used when analyzing 
the VoIP data traffic. 


TABLE 13-4 IP Telephone Call Packet Codes for the NBX Call 


Processor 

Code Letter Description 

0x41 A Voice data packets 

0x48 H Acknowledgement 

0x52 R Request packet, issued when a button is pressed 
0x55 U Update 


The following discussion is for a set of voice call data packets obtained using 
the setup shown in Figure 13-9. This file is provided on the Companion CD-ROM and 
is named voip-6.cap. The first packet examined is number 7. This packet is from the 
NBX call processor (MAC 00-E0-BB-06-A5-5D). It is acknowledging that the #1003 
phone has been picked up. Phone #1003 has a MAC address of 00-E0-BB-07-99-0F. 
The data in Figure 13-10 indicates Extension:1003 has picked up. The code for the 
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call is the hexadecimal numbers (Ox48 52). The code is shown boxed in Figure 
13-10. This code indicates that the packet includes an acknowledgement (48) and a 
request (52). In the next data sequence, the #1003 phone begins to dial #1002. The 
following data packets show the call processor’s acknowledgement (code 48) of the 
buttons as they are pushed. Only the contents of the data packet will be displayed. 
The sequence is provided in Figure 13-11 (a-d). 


ie | Status Bum LERE] Size e Destination | Source ja 


000003 

000004 
oo0o000s 
Donos 


00008 1.2 . 400, 800 


oo0009 l. „624.000 16 


00E0BB07990F 


26 O1EOQBBO00010 


OOEQBBO?7990F 
OOEQBBOGASSD 


160 OOEOBBO7930F 
54 OOEOBBOGASSD 


06607990F 


OOEOBBOGASSD 
OOEOBBOGASSD 
OOEOBBOG6ASSD 
OOEOBBO79390F 
OOEOBBOGASSD 
OOEOBBO?7990F 
OOEOBBOGASSD 


ET=0x8368 
ET=0xX8868 
ET=0X8863 


Data Link Control (DLC) 
Destination OOEOQBBO7390F o vendor Name. - O7990F OOEQBBO7990F 
Source OOEOBBOGASSD [No Vendor Name. - 06A550] [OOEQBBOGASSD] 
EtherType 0x8868 


Data (Data) 


Data [142 bytes] 








FIGURE 13-10 The acknowledgement that phone #1003 has been picked up. 


The next sequence first shows the call processor notifying phone #1003 that it 
is dialing #1002 in Figure 13-12. Figure 13-13 shows phone #1002 acknowledging 
the call from the call processor, basically coming online. The codes (48 48) are ac- 
knowledgements that the request was received. 

Phone #1002 has acknowledged the call, and now the call processor will go 
through multiple management steps to complete the call. This is shown in Figure 
13-14. Notice in Figure 13-14 that the UDP data packets are being used with a source 
IP address of 192.168.12.6. This is the IP address of the NBX call processor. The des- 
tination IP address for the highlighted data packet is 224.0.1.59. This is a multicast 
address used by the call processor to manage the call setup and functions. This is used 
only for call setup. Once the call is set up, the IP phones will begin transferring the 
voice data. This is shown in Figure 13-15. The code for the data packets has changed 
to (41), which is for “voice” data packets. Notice that the source and destination MAC 
addresses are alternating during the conversation. The IP phones are communicating 
directly without further need of the call processor. The data shown at the bottom of 
Figure 13-15 is the PCM voice data. 

This section has demonstrated the call setup and signaling for establishing an 
IP telephone call within a local area network. The transfer of the voice data packets 
between IP phones has also been shown. The reader should understand how the ba- 
sic call was established and how to identify the type of message using the call codes 
(Table 13-3). The reader should also understand that the call processor uses multicast 
addresses to set up the call before handing it over to the IP phones. 
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J t 88 a a». ¥] . HHR 
SD F8 .av.¥]O8... 
73 00 san he ee ere ow wee 
17 00 Tree ee ee 
oo oo iaraa arene 

20 20 

20 20 

20 20 

20 20 

01 00 


0000: OF (mpm 3B AS 5 88 68 EA. às. ¥].HHR 
0010: oo EO BB 06 SO FS ee | eee ea 
0020: 02 02 80 B3 78 00 E E N 
0030: 00 FF 00 07 17 00 KE RA 
0040: 55 00 oo 03 oo oo T ER 
0050: 20 20 20 20 20 20 

0060: | 20 20 20 20 20 20 
0070: 20 20 20 20 20 20 

0030: 20 20 20 20 20 20 es 


0090: 01 01 00 00 01 00 z.. WE. 
00A0: 


EENT o D6 A 88 6 EJEN. è+. =]. HR 
AS 5D FS Å$] OD. cee eenee 
00 78 OO ana aMeccescnnee 
00 17 OO è 
00 00 OO 
20 20 20 
20 20 20 
20 20 20 
20 20 20 
01 01 00 TeRECEEET EEE ET -+, 





Hex 


EERO 0 3B AS 5 88 6 RIEN. a». =]. HR 
00 E0 BB OG AS SD FS Te eee 
02 02 80 B3 00 78 00 P e cane nus 
00 FF 00 OF OO 17 00 

55 00 00 03 00 00 00 Ne ela ee a anada a ote 

20 20 20 20 20 20 20 

20 20 20 20 20 20 20 
30 32 20 20 20 20 20 

20 20 20 20 20 20 20 a” 
01 01 00 00 01 01 00 ee ee T, 





FIGURE 13-11 (a) The acknowledgement that phone #1003 has pressed number “1”; (b) 
the acknowledgement that phone #1003 has pressed number “1 0”; (c) the 
acknowledgement that phone #1003 has pressed number “1 0 0”; (d) the acknowledgement 
that phone #1003 has pressed number “1 0 0 2”. 
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FIGURE 13-13 The acknowledgement of the call from phone #1002 back to the call 
processor. 
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FIGURE 13-14 The call processor's management steps to set up the phones so that voice 
data transfer can begin. 
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FIGURE 13-15 The exchange of voice packets (code 41) between the two IP phones. 
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Analyzing VoIP Telephone Call Data Packets 


This section examines the data packets that are being exchanged in a VoIP telephone 
call. The test setup for the VoIP telephone call is shown in Figure 13-16. This picture 
shows that the network consists of two VoIP telephones, two NBX 3000 Call Proces- 
sors, and two routers. The data packets were captured using the Finisar Surveyor 
Demo software provided with the text. The computer running the Surveyor Demo 
software and two NBX call processors were connected to a networking hub so that 
each share the Ethernet data link. This was done so that all the VoIP data packets be- 
ing exchanged between the telephones, the call processors, and the routers could be 
captured at the same time with one protocol analyzer. The VoIP captures are provided 
on the textbook CD-ROM in the Finisar folder (filename VoIP-cap2.cap) 


LANA LAN B 
192.168.10.0 169.169.3.0 


192.168.10.1 


Call Processor FA0/0 FA0/0 Call Processor 
00:e0:bb:1c:27:c9 00:0F0:8F:5D:87:40 
VolP ee VoIP 
Phone Hub Phone 
Phone (# 1006) Phone (# 2010) 


00:e0:bb:1c:07:0a Dial 62 — for accessing 00:e0:bb:1c:06:87 
an outside line 


192.168.10.5 
Protocol Analyzer 








FIGURE 13-16 The test setup for the VoIP telephone call. 


In the following example, a telephone call is being placed from extension 1006 
to the 62-2010 extension. The first packet examined is number 5, shown in Figure 
13-17. This packet source is from the LANA NBX call processor with the MAC ad- 
dress of 00:E0:BB:1C:27:C9. The HR text (indicated by the arrow) is an acknowl- 
edgment that extension 1006 (00:e0:bb:1c:07:0a) was picked up to dial the call. The 
call packet codes for the NBX call processor are listed in Table 13-4. H (Ox48) is an 
acknowledgement, and R (0x52) is a request packet that is issued when a button is 
pushed. 

Packet number 19 (see Figure 13-18) shows the call processor 
(00:E0:BB:1C:27:C9) acknowledging back to extension 1006 (00:e0:bb:1c:07:0a) 
dialing the number 62 to go outside the network (LANA) to talk to the destination 
phone in LANB. The 62 is the number used by the call processor to get an outside 
telephone line. This is defined in the call processors call plan. Once again, the HR 
code is listed at the beginning of the data packet. The HR codes will repeat through- 
out the call setup, Figure 13-19 (a-d). 
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FIGURE 13-17 The acknowledgement that extension 1006 was picked up. 
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FIGURE 13-18 Dialing “62” for an outside line. 
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FIGURE 13-19 Dialing the outside line at 62-2010. 


Packet number 23 (Figure 13-19 [a]) is showing ext. 1006 dialing the first 
number “2” in the corresponding phone number on LANB. 

Packet number 27 (Figure 13-19 [b]) is showing ext. 1006 dialing the second 
number in the corresponding phone number on LANB. 

Packet number 33 (Figure 13-19 [c]) is showing ext. 1006 dialing the third 
number in the corresponding phone number on LANB. 

Packet number 39 (Figure 13-19 [d]) is showing ext. 1006 dialing the forth 
number in the corresponding phone number on LANB. 

Packets 41-52 (Figure 13-19) are showing the handshaking between the two 
networks. Notice that the source and destination have changed to the IP ad- 
dresses for the VoIP telephone call. 


Finally, Figure 13-20 shows the packets been exchanged between the two IP 


phones. 


Chapter 13 


——, e Voice over IP 


Im Surveyor Demo - Detail View - [C:\Documents and Settings\Administrator Desktop\Networking 2eWolP\voip-cap2.cap - 10 MBPS - ( 63 frames total ) ... ER) 
=| File Edit Configuration View Module Monitor Views Capture Views Tools Window Help -=| 8| x 





SH- BS mi B-«-R 
H M M 4 > WD dT @ @ Z| Display Filter: | -| |# RS 
| _FID | Book... | Sta...| Elapsed [sec] | Size | Destination | Source | Summar 


000039 2.365.562... 166 00E0BB1C070A 00E0BB1C27C9 Ev2 ET=0x8868 

000040 2.366.888... 68  00E0BB1C27C9 00E0BB1C070A Ev2 ET=0x8868 

000041 2.370.899... 1372 169.169.3.20 192.168.10.3 UDP SP=1025 DP=2093 LEN=1334 
000042 2.372.268... 1372 169.169.3.20 192.168.10.3 UDP SP=1025 DP=2093 LEN=1334 
000043 2.374.535... 64 192.168.10.3 169.169.3.20 UDP SP=1025 DP=2093 LEN=26 
000044 2.374.692... 64 192.168.10.3 169.169.3.20 UDP SP=1025 DP=2093 LEN=26 

| 000045 | | 2.393.565... |1372 | 192.168.10.3 | 169.169.3.20 | UDP_SP=1025 DP=2093 LEN= 1334 

000046 2,394,852... 1372 192.168.10.3 169.169.3.20 UDP SP=1025 DP=2093 LEN=1334 
000047 2.395.535... 64  — 169.169,3.20 192.168.10.3 UDP SP=1025 DP=2093 LEN=26 
000048 2,395,692... 64 — 169,169.3.20 192.168.10.3 UDP SP=1025 DP=2093 LEN=26 
000049 2,399,263... 1372 192.168.10.3 169.169.3.20 UDP SP=1025 DP=2093 LEN=1334 
000050 2.400.557... 1372 192.168.10.3 169.169.3.20 UDP SP=1025 DP=2093 LEN=1334 


m | 























Detail View Frame ID 45, arrived at 05/07 14:40:49.393565, Frame Status: 
(Good Frame} 





Data Link Control 

(DLC) 
Destination OOOFSF508741 [No Vendor Name. - 508741] [000F8F508741] 
000F8F5D86E1 [No Vendor Name. - 5D86E1] [OOOFSFSD86E1] 
EtherType 0x0800 (Internet Protocol (IP)) 














06 07 08 09 OA OB OC 
7F 11 47 10 A9 A9 

36 52 

o0 06 

64 01 

3A 31 

OF 01 

o0 Os 

05 o5 


Meow lirar 


f>] Capture View Á Overview i Sanvers K Transactions issues AClients 7 








FIGURE 13-20 The handshaking between the two IP networks and the start of the VoIP 
telephone call. 


This section has demonstrated the call setup and signaling for establishing a 
VoIP telephone call within two networks. The student should understand how the ba- 
sic call was established (same as voice over Ethernet) and that dialing “62” was re- 
quired to get an access line. 
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SUMMARY 


This chapter presented an introduction to voice over IP telephony. The network ad- 
ministrator must be aware of the impact of integrating VoIP into the network. Ad- 
vancements in technology are making the integration of voice and data easier, but 
along with the simplification comes the requirement that the network administrator 
fully comprehend the capabilities and limitations of the technologies. The student 
should understand the following concepts: 


e How IP telephony interfaces with the PSTN 

e The signaling techniques used by IP telephony 

e The steps for preparing the VoIP signal for transport 

e How VoIP can be integrated into a company’s network 

e The quality of service (QoS) issues for VoIP 

e The importance of using VLANs with for VoIP traffic within the LAN 
e The potential security threats for VoIP 

e The types of data packets issued when setting up a VoIP call 


QUESTIONS AND PROBLEMS 


Section 13-2 


Define PBX. 

Define PSTN. 

What is the purpose of a gateway? 

List four enhanced features of SS7. 

What are the signaling techniques used in IP telephony? 

What are RTP and RTCP used for in VoIP? 

What does a processor in a VoIP receiver do if a voice data packet is lost? 
How is the timestamp on VoIP data packets used? 


ea a iS 


Section 13-3 





9. What are three ways a company can implement VoIP into their network? 

10. What is a standard solution for combining voice and data traffic? 

11. What is the purpose of a VoIP gateway? 

12. What is another term for a VoIP gateway? 

13. What are two advantages of replacing an existing PBX tie line with a VoIP/Data 
network? 

14. What is the disadvantage of replacing an existing PBX tie line with a VoIP net- 
work? 

15. List two advantages of upgrading the PBX to support VoIP. 

16. What does it mean for a company to switch to a complete IP solution? 
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Section 13-4 


17. What are three QoS issues for a VoIP network? 

18. What causes jitter in the received signal? 

19. How can the effects of jitter be minimized? 

20. When does buffering the received data packets not work in VoIP? 
21. What is network latency? 

22. What causes network data traffic congestion? 

23. What is WRED, and what is its purpose? 

24. What is the basic form of queuing? 

25. What is WFQ, and what is its purpose? 

26. What is the purpose of priority queuing? 

27. Which queuing technique reserves channel bandwidth for selected data traffic? 
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28. What is the purpose of the basic codes used by the NBX call processor? 
29. Which code identifies voice data packets? 

30. What does the code 0x52 identify? 

31. What is the purpose of multicasting in IP telephony? 


Critical Thinking 


32. Prepare a technical memo to your supervisor that explains how VoIP can be im- 
plemented on your local network. 

33. Use the Internet to find out what queuing systems are currently recommended 
for data traffic. 
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CHAPTER OUTLINE 


14-1 Introduction 


14-2 Installing and Configuring the Net- 
work Server 


14-3 Adding Computers, Users, and 


Groups 
14-4 Setting Group Permissions and 
Policies 
OBJECTIVES 


Define the concept of a peer-to-peer network 
Define the concept of a client-server network 
Describe the function of a server in a network 
Discuss the issues of installing the network 
operating software 

Describe the issues of installing, configuring, 
and administering Windows 2008/2003 
servers 

Describe the procedures for setting group 
permissions and policies 


KEY TERMS 


14-5 Verifying “Network” and “My Net- 
work Places” in Windows-based PCs 

14-6 Configuring the Network Server’s 
Account Lockout Policy 


Summary 


Questions and Problems 


Describe the procedures for setting up an or- 
ganizational unit 

Describing the procedures for verifying “My 
Network Places” on Windows-based PCs 
Describe the options for configuring a user’s 
account lockout policy 

Describe how to identify the users connected 
to a Windows 2008/2003 server 

Describe how to send a message to a user con- 
nected to the server 
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Active Directory 
domain controller 
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container 
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authenticated 
applet 
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14-1 INTRODUCTION 


Network Server The concept of assembling a simple office LAN was introduced in Chapter 1. This 
Provides access to services chapter introduces the next piece for the LAN, the network server. The network 
on the network server is an integral part of today’s high-performance networks. Its function is to pro- 


vide access to resources such as file sharing, printing, and services such as email, se- 
curity, and Internet web page services. This chapter introduces the network server 
from the point of view of the person or persons responsible for installing, configur- 
ing, and maintaining the server and all of the computers that connect to it, in other 
words, the system administrator for the LAN. The chapter begins with an overview 
of the basic network types and server functions used in LANs. In section 14-2, the 
procedures for configuring a Windows 2008/2003 server for a small LAN are pre- 
sented. A network server is useless without computers, users, and groups, so the pro- 
cedures for setting these up in a network are introduced in section 14-3. Section 14-4 
examines setting permissions and policies for the groups. Steps for using “My Net- 
work Places” to connect to the computers on the domain follows in section 14-5. 
(““Network” is Windows Vista’s new name for “My Network Places” and “Network 
Neighborhood.’) The chapter concludes with a look at configuring the users account 
lockout policy on the network server. 


Network Definitions 


There are many hardware and software choices available today for configuring a 
computer network. This chapter introduces the fundamental concepts a LAN network 
administrator must know to perform his or her job and what issues must be addressed 
to properly select the network server software and hardware. The Windows 
2008/2003 server software demonstrated in this chapter is typical of the network 
server software available. 

There are many issues to be addressed. A small office LAN may need minimal 
server support. In fact, in some cases the only server function required by the small 
LAN is for shared printer access, something easily accomplished with a shared net- 
work printer. A larger LAN might need to share files and data. Another LAN might 
need to control access to data. These and other issues must be addressed when con- 
figuring the LAN. The network configuration selected depends on many factors: 


e Network application 

e Number of users 

e Type of remote access needed 
e Availability of network support 
e Budget 

e Level of security required 


Client 

Computer connected to the 
network that accesses 
services from the server 


Peer Network Types 

Computer that uses and The following information defines the advantages and disadvantages of two network 
provides resources to the types, a peer-to-peer and a client/server network. A client is a computer connected to 
network the network that uses services from the server. A peer is a computer that uses and pro- 
Peer-to-peer Network vides resources to the network. In a peer-to-peer network, all computers connected 
All computers in the network 1n the network use and provide similar services. The client computer can also func- 
provide similar services tion as a server for the network. The small office LAN introduced in Chapter 1 and 
including server functions shown in Figure 14-1 is an example of a peer-to-peer network. 
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MAC Address 00-BO-D0-25-BF-48 
IP Address 10.10.10.3 


FIGURE 14-1 An example of a peer-to-peer network. 


In a client/server network the server handles multiple requests from multiple Client/Server Network 


clients for multiple services. The network shown in Figure 14-2 is a client/server The server handles multiple 
network. requests from multiple 


It isn’t practical to say which network choice, peer-to-peer or client/server, is clients for multiple services 


best for all applications. Both types are used, and it is up to the users and the admin- 
istrator for the LAN to make the choice. There are definite advantages and disadvan- 
tages for each, as outlined in Tables 14-1 and 14-2. 


TABLE 14-1 Advantages and Disadvantages of a Peer-to-Peer 


Network 

Advantages Disadvantages 

Easy to set up the network Resource sharing can affect the performance of the 
computers. 

No centralized network Poor security. 

administration 

Low cost Users must administer their own computer. 

Users control the resource No central file server. 

sharing 


No centralized administration of the computer's 
resources. 
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FIGURE 14-2 An example of a client/server network. 


TABLE 14-2 Advantages and Disadvantages of the Client/Server 


Network 

Advantages Disadvantages 

Centralized file storage Client/server software and licenses can be 
expensive. 

Centralized network security Server hardware can be expensive. 


Easy sharing of the network resources Requires a network administrator. 
Network bandwidth/resource requirements. 


Server Types 


There are many types of servers used in modern computer networks. It is important 
to note that one server can provide many server functions. In fact, a server is typically 
configured to provide multiple network services. The following information defines 
many of the available server types: 


e Application and Information Server: Contains the applications and tech- 
nologies needed to provide and process information and interact with the client. 

e Web Server: Exchanges files related to Web information, documents, activi- 
ties, and applications. 

e Email Server: Manages both local and Internet email service. 
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e DHCP Server: Dynamically assigns IP addresses to machines as needed. This 
means that a host on the network can have a different IP address assigned to it 
each time it connects to the network. As stated previously, an Internet service 
provider (ISP) dynamically assigns an IP address to your computer when you 
log on to the network. You keep this IP address as long as you remain connected 
to the network. The number expires when you log off the ISP’s network. It is 
also important to note that network devices such as routers can also function as 
DHCP servers. 

e DNS Server: Provides the name translations for the host name to an IP address. 
Enables the users in the network to use common names to identify the hosts 
rather than knowing the IP address. This is especially important in a network 
where the IP address is dynamically assigned. 

e Fax Server: Manages the electronic delivery and reception of faxes. 

e FTP Server: Provides the network administrator with the ability to control 
who can connect to a file server and what files can be shared. FTP service typ- 
ically is integrated into all network servers. It is important to note that there are 
more secure ways of sharing files such as using SCP and SFTP that both use 
TCP port 22. SCP is used to securely transfer computer files between hosts, us- 
ing the Secure Shell (SSH) protocol. SFTP uses the SSH-2 protocol to provide 
secure file transfers. 

e Proxy Server: Services information requests from clients. The information re- 
quested can be from within or external to the network (such as from the 
Internet). The information passes through the proxy server, which can control 
what information passes to and from the client. The proxy server rebuilds the 
information received so that all packets appear to originate from the proxy 
server and not the original requester. Additionally, the proxy server can also be 
used for firewall protection by establishing rules that only allow the proxy 
server to connect to the Internet for any services that it is configured to support. 

e Firewall: Manages the security of the information being transferred to and 
from a network. The firewall can be used to allow or deny requests for infor- 
mation from the network and delivery to and from hosts outside the network. 
Firewalls can be placed on the network edge or internal to the network or both. 

e Print Server: Manages requests from clients for the network printer. 


Adding the Network Server 


Figure 14-2 shows the addition of a network server to the simple office LAN. The net- 
work still includes three computers and a laser printer. The added server has been con- 
figured to run the Microsoft Windows 2008 server operating system. The MAC and 
assigned IP addresses for the server are listed, and the computer has been given the 
name W2008 Server. Note that the cabling for the network has been upgraded to 
CAT®6. This provides an improvement in the data-handling capability of the cable. 
CAT6 cable provides the ability to upgrade the network data rate to 1 gigabit. The net- 
working devices are interconnected through a switch. Remember, the switch isolates 
the data traffic, which improves the performance of the data transfers in the LAN. 
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Active Directory 

A centralized system that 
automates the management 
of user data, security, and 
distributed services 
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14-2 INSTALLING AND CONFIGURING THE 
NETWORK SERVER 


The objective of this section is to investigate and demonstrate the procedures for in- 
stalling and configuring a network server for a small LAN. The server is an integral 
part of making the computer network both powerful and resourceful. The networking 
technologies used for transporting information within your network are very impor- 
tant, and equally important is the access control of information afforded by the server. 
We introduce and discuss here the technical issues associated with configuring, main- 
taining, and troubleshooting the Windows 2008 server. There are many layers to the 
server, and it is not feasible to present a thorough discussion in one chapter or even 
in one text. The bottom line is that the Windows 2008/2003 server is very powerful 
and also very complicated. The steps presented in this chapter guide you through the 
procedure for setting up both the Windows 2008 and 2003 server. The steps are 
grouped into the following categories: 


e Section 14-2 Installing and Configuring the Network Server 
e Section 14-3 Adding Computers, Users, and Groups 
e Section 14-4 Setting Group Permissions and Policies 


Each step is well-documented with images obtained from the Windows 
2008/2003 server configuration menus. 

The first part of this section examines the steps for creating a server domain in 
Windows 2003 server using the configure Your Server Wizard. This is followed by an 
overview of the steps for configuring a Windows 2008 server. 


Creating a Server Domain (Windows 2003 Server) 


1. To install a server domain with 2003 Server, click Start—Programs— 
Administrative Tools—Configure Server Wizard. 


Active Directory is a centralized system that automates the network manage- 
ment of user data, security, and distributed services (computing resources are 
spread out over the network on more than one computer). 


You will be taken to the Active Directory Installation Wizard menu shown in 
Figure 14-3. 


Active Directory Installation Wizard 







Welcome to the Active Directory 
Installation Wizard 
This wizard helps you install Active Directory services on this 


server, making the server a domain controller. 





To continue, click Next. 





i Cancel | 





FIGURE 14-3 The Welcome screen of the Active Directory Installation Wizard menu. 


The Network Server 


2. In the Welcome screen, click Next. This opens the Domain Controller Type Domain Controller 
window. Select Domain controller for a new domain. The menu for selecting Provides authentication, 
the domain controller type is shown in Figure 14-4. A domain controller stores directory information, 
provides authentication, stores directory information, and provides directory and provides directory 
services. ae 





Active Directory Installation Wizard 


Domain Controller Type 
Specify the role you want this server to have. 








FIGURE 14-4 The menu for selecting the domain controller type. 


3. In the Domain Controller Type window click Next. This opens the Create Tree Tree 
or Child Domain window shown in Figure 14-5. Select Create a new domain A domain 
tree in this window and click Next. Child 


A subset domain of the main 
Active Directory Installation Wizard domain 





Create Tree or Child Domain 
‘fou can create a new domain tree or a new child domain. 








FIGURE 14-5 The menu to create a child domain in an existing tree or create a new 
domain tree. 
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Forest 4. This opens the Create or Join Forest window shown in Figure 14-6. In this win- 

A collection of groups of dow, you are being asked whether you want to create a new forest (collection 

domains of domains) or join an existing one. The server we are adding to the LAN is the 
first server and is independent of any existing forests. For this exercise you will 
click Create a new forest of domain trees and click Next. 





Active Directory Installation Wizard 


Create or Join Forest 
Specify the location of the new domain. 








FIGURE 14-6 The menu to create or to join a forest. 


5. The next window opened is New Domain Name, which allows you to specify 
a name for the domain. The window is shown in Figure 14-7. In the full DNS 
name box type the domain name exactly as you want it to appear; for this ex- 
ample we will use salsa. You can also specify a full name, such as 
salsa.nmsu.edu. For this example, we have kept the DNS name simple. After 
entering the name click Next. 





Active Directory Installation Wizard 


New Domain Name 
Specify a name for the new domain. 











FIGURE 14-7 The window for specifying the domain name. 
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6. This opens the NetBIOS Domain Name window, which shows the name that NetBIOS 
earlier users of Windows will use to identify the new domain. The window is Computer naming convention 


shown in Figure 14-8. Click Next to proceed to the next window. that can be understood by 
the user and maps the 
NetBIOS name to an IP 


Active Directory Installation Wizard x| 
address. 


NetBIOS Domain Name 
Specify a NetBIOS name for the new domain. 


This is the name that users of earlier versions of Windows will use to identify the new 
domain. Click Next to accept the name shown, or type a new name. 











Domain NetBIOS name: 


< Back Cancel 





FIGURE 14-8 The NetBIOS Name window. 


7. The next window is for specifying the file directory locations for the database 
and the active directory log (Figure 14-9). In this example the file locations 
used are the default file paths. After entering the correct information click Next. 


Active Directory Installation Wizard x| 


Database and Log Locations 
Specify the locations of the Active Directory database and log. 


For best performance and recoverability, store the database and the log on separate 
hard disks. 








Where do you want to store the Active Directory database? 





Browse... 


Where do you want to store the Active Directory log? 


Log location: 


[CAWINNTANTDS Browse... 


pee] 





FIGURE 14-9 The window for specifying the database and log locations. 


8. The next window is the Shared System Volume. The default folder location is 
listed in Figure 14-10. Click Next to proceed to the next window. In our exam- 
ple the warning message shown in Figure 14-11 is displayed, which advises 
you that a DNS server handling salsa could not be contacted. This is expected 
since you are just beginning to set up the services provided by the server. 
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Active Directory Installation Wizard 


Shared System Yolume 
Specify the folder to be shared as the system volume. 











FIGURE 14-10 The Shared System Volume window. 





` Active Directory Installation Wizard 


i) 








FIGURE 14-11 The warning about DNS services. 


9. Click OK on the DNS warning to advance to the next window and then Con- 
figure DNS (Figure 14-12). Select YES, install and configure DNS on this 
computer and click Next. 





Active Directory Installation Wizard 


Configure DNS 
The wizard can configure DNS for your new domain. 








FIGURE 14-12 The Configure DNS window. 
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10. The next window, shown in Figure 14-13, is for setting default permissions for 
users and groups. Select Permissions compatible only with Windows 2000 
servers and click Next. 





Active Directory Installation Wizard 


Permissions 
Select default permissions for user and group objects. 








FIGURE 14-13 The Permissions window. 


11. The next window is for you to specify an administrator password when start- 
ing the computer in the Directory Services Restore Mode (Figure 14-14). En- 
ter your password where shown and enter the same password in the Confirm 
password line. In this example, the password is chile. Click Next. 





Active Directory Installation Wizard 


Directory Services Restore Mode Administrator Password 
Specify an Administrator password to use when starting the computer in Directory 
Services Restore Mode. 














FIGURE 14-14 The window for entering the administrator password. 


12. The next window, shown in Figure 14-15, displays a summary of the options 
selected in this installation. Check the options carefully and click Back if you 
need to make a correction. Otherwise, click Next. 
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The next window (Figure 14-16) informs you that the salsa active directory is 
installed on this computer. Click Finish. After clicking Finish you will be instructed 
to restart to activate the changes made to the Active Directory, as shown in Figure 14-17. 





Active Directory Installation Wizard x xÍ 
Summary 
Review and confirm the options you selected. 
‘You chose to: 





Configure this server as the first domain controller in a new forest of domain trees. 


The new domain name is "salsa". This is also the name of the new forest. 
The NetBIOS name of the domain is "SALSA" 
Database location: C:'\WINNTSNTDS 


Log file location: C:\WwINNTSNTDS 
Sysvol folder location: C:\WwINNTSSYSYOL 


The DNS service will be installed and configured on this computer. 


gi 


To change an option, click Back. To continue, click Next. 





< Back Cancel | 


FIGURE 14-15 The window displaying a summary of the server options selected. 





Active Directory Installation Wizard 


Completing the Active Directory 
& Installation Wizard 


Active Directory is now installed on this computer for 
the domain "salsa". 









This domain controller is assigned to the site 
"Default-First-Site-Name". Sites are managed with the 
Active Directory Sites and Services administrative tool. 


g 


To close this wizard, click Finish. 





< Back Sancel 





Active Directory Installation Wizard 


Windows must be restarted before the changes made by the Active 
Directory Installation wizard take effect. 





i Don't Restart Now | 





FIGURE 14-17 Restarting Windows to activate the changes made to the Active Directory. 
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Configuring Windows 2008 Server 


The steps for configuring the 2008 server vary depending on the current status of the 
operating system installed on the server. This section assumes the current operating 
system is Windows 2003 server. 

To install the 2008 server, click Start—Administrative Tools—Server Man- 
ager and then go to Roles Summary—Add Roles. This menu allows you to select 
the services desired (for example, Active Directory, file server, print server, mail 
server, and so on). For the Active Directory, select Active Directory Domain Ser- 
vices, follow the steps, and Install. 


Configuring the IP Address 


The next step is to configure the IP address for the network server. The network ad- 
ministrator typically selects the IP address. Make sure that you have a confirmed IP 
address prior to placing the server on the network. If two computers connected to the 
network have an IP address conflict, neither computer will function properly on the 
network. 

On the 2008 Server, click Start—Control Panel—Network and Sharing 
Center—Manage Network Connections and then right-click Properties and select 
TCP/IP4. This opens the properties menu for setting the IP address, and so on. 

On 2003 Server, right-click My Network Places—Properties and then right- 
click Local Area Connection—Properties, or (Windows 2003 Server) click Start— 
Control Panel—Network Connections—right-click Local Area Connection 
Properties 

At this point you should be placed in the Local Area Connection Properties 
menu as shown in Figure 14-18. Double-click Internet Protocol TCP/IP. This 
places you in the Internet Protocol (TCP/IP) Properties menu shown in Figure 14-19. 


Local Area Connection Properties 2| xi 


General | 


Connect using: 


| BY 3Com 30920 Integrated Fast Ethernet Controller (3C905C- 


Components checked are used by this connection: 





A File and Printer Sharing for Microsoft Networks 





Internet Protocol (TCP/IP) 


Install... | Unmstall | Properties | 


Description 
Transmission Control Protocol/Internet Protocol. The default 
wide area network protocol that provides communication 
across diverse interconnected networks. 


I Show icon in taskbar when connected 





FIGURE 14-18 The Local Area Connections Properties menu with “Internet Protocol 
(TCP/IP)” highlighted. 
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Internet Protocol (TCP/IP) Properties l Th xl 


General 


‘You can get IP settings assigned automatically if your network supports 
this capability. Otherwise, you need to ask your network administrator for 
the appropriate IP settings. 


© Obtain an IP address automatically 
@ Use the following IP address: 
IP address: 








Subnet mask: 


Default gateway: 


© abtan DNS server address automatically 


(© Use the following DNS server addresses: 







Preferred DNS server: 


Alternate DNS server: 


Advanced... | 
Cancel | 





FIGURE 14-19 The Internet Protocol (TCP/IP) Properties menu. 


Click Use the following IP address and set the address specified for your net- 
work. In this example, the private IP address 10.10.10.4 has been selected, and a sub- 
net mask of 255.0.0.0 is being used. The other option, Obtain an IP address 
automatically, is used when the IP addresses are assigned dynamically and when a 
dynamic host control (DHCP) server is used. Click OK once this step is complete. 

At this point you want to verify that the 2008 or 2003 server has accepted the 
requested IP address change, which you do by entering the command prompt in the 
Start menu. Click Start—Run, enter either command or cmd, and at the command 
prompt enter ipconfig, then hit Return or Enter. The new IP address 10.10.10.4 for 
the computer should be listed. 


14-3 ADDING COMPUTERS, USERS, AND GROUPS 


This section presents techniques for adding computers, users, and groups to the Win- 
dows 2008/2003 server. Windows 2008/2003 server provides the power to not only 
limit access by users but also by computers and groups. 

This section begins with a discussion on how to add computers to the Windows 
2008/2003 server domain. Next, the topic of adding users to the domain is examined. 
The section concludes with an overview of adding groups to the network server. The 
material includes a discussion on network administration, such as name assignments 
for computers and users and establishing groups in the network. 


Adding Computers to the Windows 2008/2003 Server Domain 


Windows 2008/2003 server recognizes all Windows operating systems, but security 
from the server can only be applied to computers operating Windows NT, Windows 
2000 Professional, Windows XP, and Windows Vista. The type of operating system 
being used by a computer also determines the manner in which the computer is added 
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to the server domain. The bottom line is the operating system must be formatted un- 
der NTFS rather than FAT file system for the computer and user to obtain secured ac- 
cess to the server. 

Adding a Windows Vista or XP Computer The most efficient way fora Workstation 
network administrator to add a computer running Windows Vista or XP is to enrol] Another name for the 
the host or computer workstation from the server. Workstation is another name for computer 
the computer. The procedure for adding a Vista or XP workstation is as follows: 


Step 1 Log on to the workstation as administrator and enter the administrator pass- 
word. 

Step 2 Right-click Computer and then select Properties. In the systems properties 
menu select the Computer Name tab. Click Change. This opens the Com- 
puter Name Changes menu shown in Figure 14-20. Enter the name of the 
computer (for example, Computer-3) and click Member of Domain. You 
will need to specify the name of the domain created on the Windows server. 
(Note also that there is only one domain per server.) After completing the 
entries, click OK. (Note: The name of the domain created in section 14-2 is 
salsa.) 


Computer Name Changes 


You can change the name and the membership of this 
computer. Changes may affect access to network resources. 


Computer name: 





Computer-3 





Full computer name: 
Computer-3. 


Member of 
© Domain: 
SALSA 

















© Workgroup: 








FIGURE 14-20 The Vista/XP Computer Name Changes menu. 


A new Computer Name Changes menu, shown in Figure 14-21, will be 
opened. This menu instructs you to enter the name and password of an ac- 
count with permission to join the domain. The account with this permission 
is the administrator. Input administrator as the user name and enter the 
password for the administrator. The administrator password was set during 
installation and configuration of the server. 
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Computer Name Changes 


Enter the name and password of an account with permission 
to join the domain, 





User name: © administrator 








Password: eeece 














FIGURE 14-21 The menu for entering the administrator name and password. 


Step 3 After entering administrator and the password, click OK. You will be in- 
structed to reboot the computer to complete the installation. (Note: The first 
time a newly enrolled computer logs on to the network, it can take two to 
three minutes to reconfigure itself and link up with the server.) This com- 
pletes the step for enrolling the computer onto the Windows 2008/2003 salsa 


domain. 
Container Step 4 Place the enrolled computer into the proper container in the Active Direc- 
Windows 2008/2003 server tory. A container is a Windows 2008/2003 server name for a folder. The 
name for a folder icons for the 2008 and 2003 containers are shown in Figure 14-22. Return to 


the Active Directory Users and Computers menu by clicking Start—Pro- 
grams—Administrative Tools—Active Directory Users and Computers. 
Place the newly enrolled computer (Computer-3) into the “Computers” 
container. 


Container 


| a 


2008 2003 


FIGURE 14-22 The icon for a container in Windows 2008 and 2003. 


Community Computer Adding Windows Computers If the computer is running Windows 9x or 
A computer that has no any operating system configured with FAT, then domain access can only be acquired 
security attached to it by adding the computer to the domain. However, there is no security—any user will 


have access to the domain to print and to file share. In other words, the computer is 
considered a community computer, meaning that it has no security attached to it. 
The steps to add a Windows 9x computer to the Windows 2008/2003 server domain 
are given here. 

To begin, click Start—Programs—Administrative Tools—<Active Direc- 
tory Users and then right-click the Active Directory Domain (for example, salsa) 
and select New—Computer as shown in Figure 14-23. 
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c> SUS eWay ss 
salsa 10 objects 


Active Directory Users and Comp 
H-P salsa == builtinDomain 
Delegate Control... 
Container Default container For upar... 
Find... a 
.. Organizational... Default container for new... 


Connect to Domain... . f 
; » Container Default container For secu... 
Connect to Domain Controller... oar 
Organizational ... 


Operations Masters... Organizational ... 


New Computer Default container for upar... 
All Tasks Contact 

a ae aa a re (Array 

Organizational Unit 

Printer 


View 
New Window From Here 


Refresh User 
Export List... Shared Folder 


Properties 


Help 





FIGURE 14-23 The Active Directory Users menu for adding a new computer. 


Click Computer, which opens the New Object-Computer menu, as shown in 
Figure 14-24. Enter the requested information in the New Object-Computer menu 
and press OK when done. You will need to click the box, Allow pre-Windows 
2008/2003 computers to use this account. (Note: For now, it is okay to leave the 
User or group line at the default setting Default Domain Admins. The computers and 
users will be grouped in a later section. 


New Object - Computer f x| 


B) Create in: salsa? 


Computer name: 


[pcrisales 


Computer name [pre-Windows 2000): 
[PC SALES 


The following user or group can join this computer to a domain. 










User or group: 


[Default Domain Admins Change... | 


P Allow preAwindows 2000 computers to use this account 


Cancel | 


FIGURE 14-24 The New Object-Computer menu for adding a computer to the Windows 
2008/2003 server domain. 


A good way to specify computer names so that the computers can be later iden- 
tified is by using their physical location in the LAN or by using the name of the per- 
son or the group that is using the computer. For example, the computer enrolled is 
named pc-jsales, indicating that this is a personal computer belonging to Mr. J. Sales. 
Another example is pc-depot, which indicates that this is a personal computer resid- 
ing in depot maintenance. Naming conventions such as this make it easier for the net- 
work administrator to know where the computer is located or to whom the computer 
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belongs. There are many possibilities for selecting computer names, and the final de- 
cision is ultimately the network administrator’s and the supervisor’s. 


Adding Users to the Windows 2008/2003 Server Domain 


Users are grouped according to the security permissions you want them to have. To es- 
tablish group types, it is best to think of the users and what privileges they will need. The 
network administrator, along with the supervisors, typically define user rights and privi- 
leges. Certain users will need to have more privileges than others. Some will have differ- 
ent printer needs or different access levels to privileged information in the network. 
Accessibility for all users in all groups is set in Windows 2008/2003 server. Accessibility 
is defined by the network server policies. The icon for a user 1s provided in Figure 14-25. 


user icon 


a £ 


2008 2003 


FIGURE 14-25 The user icon. 


Individual users are added to the Windows 2008/2003 server domain using the 
following steps: 


Step 1 (For 2008 Server) Click Start—Administrative Tools—Active Directory 
Users and Computers 
(For 2003 Server) Click Start—Programs—Administrative Tools—Ac- 
tive Directory Users and Computers. 
Now in both right-click the Active Directory Domain (for example, salsa) 
and select New—User, as shown in Figure 14-26. This opens the New Ob- 
ject-User menu shown in Figure 14-27. 





[Bi Active Directory users and Computers Z 
e| >m 4 OX nelu ml S TEA 
cription 


E] Active Directory Users and Comput [Name ë D Descri 
o Saved Queries Built-in account for admini... 
s. Security Group... Members in this group can... 
Security Group... Members of this group are... 
s User 

»» Security Group... Members in this group can... 
s. Security Group... Members who have admini... 
Security Group... Members who have view-... 
.. Designated administrators... 
| workstations and serve... 
| domain controllers in th... 

| domain guests 

| domain users 
designated administrators... 
embers of this group are... 
embers in this group can... 
uilt-in account for guest... 
A ervers in this group can... 
Gè Read-only D... Security Group ... Members of this group are... 
Kè, Schema Admins Security Group... Designated administrators... 








[J Ri 9:03am 


FIGURE 14-26 Adding a new user to the salsa domain. 
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New Object - User 








FIGURE 14-27 The New Object-User menu for adding a new user to the salsa domain. 


Step 2 Enter the first, last, and full name of the user and enter a logon name. There 
is also a panel that shows the user logon name for pre-Windows 2000 com- 
puters. Click Next after entering the necessary information. 

Step 3 The next menu, shown in Figure 14-28, is for entering the user’s password. 
Policies regarding the settings for the password type are established by the 
network administrator and supervisors. Click Next when complete. 





New Object - User 


Ej 
Ej 
E 








FIGURE 14-28 The New Object-User menu for setting the user's password. 


The next menu is a summary of the settings for the new user added to the do- 
main (Figure 14-29). Figure 14-30 shows that the new user has been added to the 
Windows 2008/2003 server’s salsa domain. 
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New Object - User x| 


e Create in: salsa? 


When you click Finish, the following object will be created: 


Full name: Jay J. Sales 





User logon name: jsales@salsa 


The password never expires. 


i Cancel 





FIGURE 14-29 The New Object-User summary of the setting for the added user. 


@ Active Directory Users and Computers Er =10| x| 


e9 5m 4 0 XO dsl Hums aTa 

E| Active Directory Users and Comput [Name sd Types Desa 

E] Saved Queries (5) Builtin builtinDomain 

| salsa E Computers Container Default container for upgr... 
L] Builtin [Æ] Domain Cont... Organizational... Default container for dom... 

ET Engineering Organizational ... 

E} ForeignSecur.., Container Default container for secu... 


& 
ption 


C Computers 

E Domain Controllers 

CÌ ForeignSecurityPrincipals 
A Users 
E] Engineering 


JB User 
8 Jay J. Sales User 
& sales Security Group ... 
E Users Container Default container for upgr... 





FIGURE 14-30 The Active Directory Users and Computers screen showing the addition of 
the new user jsales. 


Organizational Unit Adding Organizational Units and Groups to the Windows 

Specialized container that 2008/2003 Server Domain 

allows group policies to 
hasat This section presents the background information and the steps for adding organiza- 


tional units and groups to the Windows 2008/2003 server domain. You can set poli- 
cies to individual users, but if your network has many users, it is not practical to set 
policies to each individual. This is also true for setting policies for individual com- 
i i puters. The solution is to place the users and computers in groups and organizational 
to set policy at the domain . os i BEPA 
ee units where permissions are set according to each group’s need. An organizational 
or organizational unit IN a . is 
isvel-—crcups Gi users wiii unit is a specialized container that allows group policies to be set. A group is a col- 
have various levels of rights. lection of users or computers that can be used to set policy at the domain level or at 


Group 
Collection of users and 
computers that can be used 
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the organizational unit level. Group names are typically defined by their function or 
position in the organization. For example, one group could be for supervisors, another 
for secretaries, and another for accounting. Figure 14-31 shows the icons for the 
group and the organizational unit. 


P, £8 Group 


<< je, Organizational 
n A ; 
Ed Unit 


2008 2003 


FIGURE 14-31 The icons for a group and an organizational unit. 


In regard to access of the groups and organizational units, a network adminis- 
trator will need full access to the complete domain structure; however, users need ac- 
cess only to limited network resources such as the network printer, file sharing, and 
their own folders. Also not all users will have the same access rights, so different 
groups of users will have various levels of rights. The steps for setting group permis- 
sions and policies are outlined in section 14-4. 

To add a group to the server, click Start—Administrative Tools—<Active Di- 
rectory Users and Computers and right-click the Active Directory Domain (for 
example, salsa). Select New—Group as shown in Figure 14-32. This opens the New 
Object-Group menu as shown in Figure 14-33. Input the required information and 


click OK. In this example, a new group called sales is added. The new sales group is 
shown in Figure 14-34. 


f@ Active Directory Users and Computers pe 5 lolx] 


€ 9| jm 0p ael H mls e aT R 
E] Active Directory Users and Comput =scripti 


(>) Saved Queries builtinDomain 


o g EEE Container Default container for upgr... 


C Builtin 


— Organizational... Default container for dom... 
C] Comput 


Organizational ... 

Container Default container for secu... 
lostAndFound Default container for orph... 
Container Default location for storag... 
Container Builtin system settings 


Š] test sult container for upgr... 
E Users ta specifications cont... 
A nTDsQ 





FIGURE 14-32 The screen display for adding a new organizational unit or group. 
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New Object - Group 








P| Universal) 








Default container for upgr... 
Default container for dom... 


Default container for secu... 
Default container for orph... 
Default location for storag... 
Builtin system settings 


Default container for upgr... 
. Quota specifications cont... 











FIGURE 14-34 The addition of the sales group to the salsa domain. 


The procedure for adding an organizational unit to the server is similar to 
adding a group. To add an organizational unit to the server, click Start—Adminis- 
trative Tools—Active Directory Users and Computers and right-click the Active 
Directory Domain (for example, salsa). Select New—Organizational Unit as 
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shown in Figure 14-35. This opens the New Object-Organizational Unit menu, 
shown in Figure 14-36. Input the required information and click OK. In this example, 
a new group called sales is added. The new sales group is shown in Figure 14-37. 





& Active Directory Users and Computers 























FIGURE 14-36 The menu for adding a new organizational unit. 
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@ Active Directory Users and Computers Zz E o x 


€s Am üle esa 
T Active Directory Users and Comput [Nane [Type a E) 


E] Saved Queries E Builtin builtinDomain 
# salsa C computers Container Default container for upgr... 
E] Domain Cont... Organizational Unit Default container for dom... 
EF! Engineering Organizational Unit 
(J ForeignSecur... Container Default container for secu... 
C] LostAndFound lostAndFound Default container for orph... 
C Program Data Container Default location for storag... 
C System Container Builtin system settings 
E test Organizational Unit 
E Users Container Default container for upgr... 
E nms Quotas msDS-QuotaContainer Quota specifications cont... 
E] new-sales Organizational Unit 
Infrastructure infrastructureUpdate 
User 
User 
.. Security Group - Domain Local 
Security Group - Domain Local 





FIGURE 14-37 The addition of the new-sales organizational unit to the salsa domain. 


The next step is to place the user jsales in the organizational unit sales. This is 
shown in Figure 14-38. Double-clicking the user will open a properties menu for that 
user, as shown in Figure 14-39. 


& Active Directory Users and Computers 


| Action vew || e >| Alm |X SHB) 2 \\ #Raree 
Sales 2 objects 


as Active Directory Users and Comp ‘Name [Type [Description =—Ss | | 


=) salsa (Z Sales Admins Organizational ... 
H-E Builtin © jsales User 
H-E Computers 





FIGURE 14-38 The addition of the user jsales to the sales organizational unit. 
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FIGURE 14-39 The Properties menu for the user jsales. 


14-4 SETTING GROUP PERMISSIONS AND 
POLICIES 


Permissions and policies enable the network administrator to tailor the features of the 
server to best complement the needs of the users in the network. Permissions and 
policies are not typically placed on a server to limit users’ capability to do their work 
but rather to protect their computer environment. Network administrators do not want 
to impose unnecessary permissions and policies on the users of the network. If too 
many restrictions are placed, then the network administrator will be continually 
called to help fix problems that may be created by permission and policy settings. For 
example, the administrator can set the number of password attempts a user has: If the 
user fails to enter the correct password after x number of attempts, then the user can 
be locked out. The network administrator must carefully select the allowed number 
of password attempts. If too many attempts are allowed, a hacker could get into the 
computer. Allowing too few attempts will likely lead to excessive locked-out com- 
puters and numerous calls to the administrator to have the user accounts unlocked. 

The restrictions placed on the network are there to protect the user, the server, 
and the network. Some policies are put in place to enhance productivity, protect the 
network resources, and allow users to share resources without loss of security. In 
computer clusters that have multiple users using multiple computers, certain restric- 
tions, such as modifying the wallpaper settings, can be necessary so that each com- 
puter looks the same to every user. 
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Access to the computer’s control panel can also be limited. This is useful when 
there is a concern that configuration options can be changed. This is undesirable in 
computer clusters with multiple users. You don’t want to allow one user to make 
changes in the computer configuration that affects many. 


Authenticated A benefit of having a server control access to the network resources is each time 
The server verifies that the a user logs on, the user and the computer are authenticated. Authenticated means the 
computer and user are who server verifies that the computer and user can have access to the network. 

they say they are The administrator of the Windows 2008/2003 server determines the group or 


organizational unit the user belongs to and applies computer and user policies to that 
group. Computer and user policies can be set on the local machine or on the server. 
The server’s policies take precedence if the policies on the local machine and the 
server conflict. 

One of the most desirable features of a network is to have the capability to set 
permissions and policies, and thus enhance users’ productivity and protect the re- 
sources of the network. Not every user will agree with every server policy, but indi- 
vidual users can request exceptions. This section illustrates establishing a new group 
and setting permissions and policies for that group in Windows 2008/2003 server. 
Specifically, examples of creating a new group policy are presented for both com- 
puters and users. 

Setting policies affects all current and future user accounts, but it does not af- 
fect users and computers that are currently logged on. The new policies will apply to 
all users the next time they log on to the server. In Windows 2008/2003 server, poli- 
cies for computers and users are set generally at the server, not at the workstation. The 
steps for setting domain policies differs for 2008 and 2003 servers. Examples of set- 
ting both are demonstrated. 


2008 Server: Setting Domain Policies 


To set domain policies for users and computers for Windows 2008 Server, click 
Start—Administrative Tools—Group Policy Management, as shown in Figure 
14-40. This opens the Group Policy Management menu shown in Figure 14-41. Se- 
lect the group for which you will be setting the policies. In this case, the LAN Com- 
puters group has been selected. Right-click the selected group and select Edit. This 
opens the Group Policy Management Editor menu shown in Figure 14-42. This menu 
shows folders for Computer Configuration and User Configuration. The computer 
policies apply first, and then the user’s policies are applied. 
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FIGURE 14-41 The Group Policy Management menu. 
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FIGURE 14-42 The Group Policy menu for the LAN Computers group. 


Double-click Computer Configuration and select Policies—Windows Set- 
tings—Security Settings—Local Policies—Security Options. This opens the list 
of policy options for the computers in the LAN Computers group shown in Figure 
14-43. Select the desired group policy that needs to be enabled. In this example, the 
policy “Do not display last user name at logon screen” is to be enabled. First high- 
light the policy, as shown in Figure 14-43. This policy forces the computer to not dis- 
play the last user’s logon name. This is beneficial for security reasons because it does 
not allow users to view others’ logon names. If another user knows someone else’s 
logon name, he or she only has to guess a password to gain access to the account. 
Double-click the policy to display the security policy setting shown in Figure 14-44. 
Check Define this policy setting and select Enabled. Press OK, and the highlighted 
policy should be enabled. 

After setting the computer policies, the next task is to set policies for the users. 
Double-click User Configuration —Policies—Administrative Template—Con- 
trol Panel—Display. The menu shown in Figure 14-45 is displayed. In this example, 
the policy “Prevent changing wallpaper” has been highlighted. Double-click the pol- 
icy, select Enabled, and click OK to enable the policy as shown in Figure 14-46. This 
sets the policy so that a user of the computer cannot change the wallpaper settings dis- 
played on the computer screen. 
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FIGURE 14-44 Enabling the “Do not display last user name in logon screen” policy. 
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FIGURE 14-45 The Group Policy Management Editor menu with the “Prevent Changing 
Wallpaper” policy highlighted. 
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FIGURE 14-46 The menu for enabling the “Prevent Changing Wallpaper” policy. 


You can also make sure that when a user logs on to a computer, the control 
panel is not displayed. You can use this policy (see Figure 14-47) to prevent users 
from changing operating parameters on the computer. This is of critical importance 
when you have multiple users for one computer. However, use caution if you do this 
because you can disable some computer features that the user needs, such as access 
to printing. Test the requirements of your software before arbitrarily setting policies. 
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FIGURE 14-47 Selecting the policy “Remove Display in the Control Panel.” 
2003 Server: Setting Domain Policies 
To set the policies, click Start—Programs—Administrative Tools—Active Direc- 
tory Users and Computers. Policies can be set for organizational units or for the do- 
main. The policies for the organizational units are set separately if the policies differ 
from the domain. Organizational unit policies provide stricter access than domain 
policies. This allows the network administrator to set different policies for different 
groups based on their need and function. 

To set domain policies for users and computers for Windows 2003 Server, right- 
click the domain name (for example, salsa) and select Properties as shown in Figure 
14-48. Click the Group Policy tab, and the salsa Properties menu shown in Figure 
14-49 should be displayed. To add a group, click New Group Policy Object and en- 
ter the name of the new group. Click OK when done. The name of the new group 
should appear and be highlighted. In this case, the new group, LAN Computers, has 
been created, as shown in Figure 14-50. 

While still in the salsa Properties menu, highlight the LAN Computers group 
name and click Edit. This opens the Group Policy menu shown on the left side of Fig- 
ure 14-51. This menu shows folders for Computer Configuration and User Configu- 
ration. The computer policies apply first, and then the user’s policies are applied. 


Section 14-4 e SETTING GROUP PERMISSIONS AND POLICIES 539 


S Aa 





& Active Directory Users and Computers 


builtinDomain 

Container Default container For upar... 
Organizational... Default container for new... 
Container Default container For secu... 
Organizational ... 

Organizational ... 

Organizational ... 

Container Default container For upar... 
User 

User 

Security Group ... 

User 

User 

Computer 

Computer 

Computer 

Computer 

Computer 

Computer 

Security Group ... 





Properties 














Default Domain Policy 








| Up 
UGWH 








FIGURE 14-49 The Group Policy menu for adding a group policy to the domain. 
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FIGURE 14-50 The LAN Computers group in the salsa domain. 
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FIGURE 14-51 The Group Policy menu for the LAN Computers group. 


Under Computer Configuration, click Windows Settings—Security Set- 
tings—Local Policies—Security Options. When in the Group Policy menu, select 
the desired group policy that needs to be enabled. In this example, the policy “Do not 
display last user name at logon screen” is to be enabled. First highlight the policy, as 
shown in Figure 14-52. This policy forces the computer to not display the last user’s 
logon name. This is beneficial for security reasons because it does not allow other 
users to view your logon name. If another user knows your logon name, they only 
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have to guess your password to gain access to your account. Double-click the policy 
to enable the security policy settings as shown in Figure 14-53. Check Define this 
policy setting and select Enabled. Press OK, and the highlighted policy should be 
enabled, as shown in Figure 14-54. 


Picornell: Group Policy g T laj x| 
| Action view || = » | lm] x BIA 





Tree | Policy fd Computer Setting Sooo o 
LAN Computers [w2kserver.salsa] F [82] Additional restrictions for anonymous connec... Not defined 
= Computer Configuration ing] Allow server operators to schedule tasks (do... Not defined 
(0 Software Settings [82] Allow system to be shut down without havin... Not defined 
-6 Windows Settings Rd] Allowed to eject removable NTFS media Not defined 
oe a Scripts (Startup/Shutdo Rg] Amount of idle time required before disconne... Not defined 
B-58 Security Settings as] Audit the access of global system objects Not defined 
S Account Policies Bs] Audit use of Backup and Restore privilege Not defined 
Ag Local Policies laS] Automatically log off users when logon time ... Not defined 


: - ggj User Rights Ass [Rd] Clear virtual memory pagefile when systems... Not defined 
Rg] Digitally sign client communication (always) Not defined 

RZ] Digitally sign client communication (when pos... Not defined 
82) Digitally sign server communication (always) Not defined 
GB Registry 2| Digitally sign server communication (when po... Not defined 

E- GM File System isable CTRL+ALT+DEL requirement For logon Mot defined 

a- Public Key Policies o not display last user name in logon screen Not defined 

o] aa IP Security Policies ¢ AN Manager Authentication Level Not defined 
B- Administrative Templates [fz] Message text for users attempting to log on Not defined 
5 User Configuration [82] Message title For users attempting to log on Not defined 
H- Software Settings laS] Number of previous logons to cache (in case... Not defined 
H-6 Windows Settings Rg] Prevent system maintenance of computer ac... Not defined 
H£ Administrative Templates Rd] Prevent users From installing printer drivers Not defined 
laS] Prompt user to change password before expi... Not defined 

iRg]Recovery Console: Allow automatic administr... Not defined 

Rd] Recovery Console: Allow floppy copy and ac... Not defined 


3 Audit Policy laS] Automatically log off users when logon time... Not defined 


: =- e Security Option: 
H- J Event Log 

H-E Restricted Groups 
H-E System Services 





9|Rename administrator accoun ot define 
RS]R dministrat t Not defined 
o| Rename guest accoun ot define 

RS]R t t Not defined 

3] Restrict CD-ROM access to locally logged-on ... Not defined 





Se as 


FIGURE 14-52 The Security Options—Group Policy menu for setting the policies for the 
LAN Computers group. 
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FIGURE 14-53 Enabling the “Do not display last user in logon screen” policy. 


The next example demonstrates how to set policies for the computer’s control 
panel. The computer’s control panel enables a user to custom configure computer set- 
tings. Open access to the control panel is not desirable in a computer cluster envi- 
ronment with multiple users. 

After setting the computer policies, the next task is to set policies for the users. 
Double-click User Configuration, double-click Administrative Template, double- 
click Control Panel, then double-click Display and the menu shown in Figure 
14-55 is displayed. In this example, the policy “Disable changing wallpaper” has 


been highlighted. Double-click the policy, select Enabled, and click OK to enable 
the policy. This sets the policy so that a user of the computer cannot change the wall- 
paper settings displayed on the computer screen. 
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FIGURE 14-54 The “Do not display last user in logon screen” policy enabled. 
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FIGURE 14-55 Setting a user policy in Windows 2003 server. 


Section 14-4 e SETTING GROUP PERMISSIONS AND POLICIES 543 


S RRS NAR ENRNROANRIY, Al 


You can also make sure that when a user logs on to a computer, the control 
panel is not displayed. You can use this policy to prevent users from changing oper- 
ating parameters on the computer. This is of critical importance when you have mul- 
tiple users for a computer. However, use caution if you do this because you can 
disable some computer features that the user needs, such as access to printing. Test 
the requirements of your software before arbitrarily setting policies. In this example, 
the omission of the printer applet (small, limited-function application) from the con- 
trol panel would make it so the documents could not be printed. 

Another option is to enable only certain properties in the control panel. To do 
this, double-click Control Panel in the Group Policy menu shown in Figure 14-56. 
Double-click Show only specified control panel applets. Click Enabled on the Pol- 
icy menu and then click the Show button highlighted in the policy list in the center of 
the screen (Figure 14-57). Click Add in the Show Contents menu. This opens the Add 
Item menu shown in Figure 14-58. Enter the text printers as shown in Figure 14-59 
and click OK. The Show Contents menu now shows “printers” as an allowed control 
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FIGURE 14-56 The Control Panel options for the user in the Group Policy menu. 
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FIGURE 14-57 The Show button in the Show only specified control panel applets 
Properties menu. 
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FIGURE 14-58 The Add Item menu. 
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FIGURE 14-59 The menu for listing “printers” as an allowed control panel applet. 


Now when a user in the LAN Computers group logs on to a computer, the only 
applet that appears in the control panel is for the printer, as shown in Figure 14-60. 
The only thing you need to do is make sure you have the proper printers installed in 
the printer folder. 
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FIGURE 14-60 The modified control panel showing only the printers applet. 


14-5 VERIFYING “NETWORK” AND “MY 
NETWORK PLACES” IN WINDOWS-BASED PCS 


In this section, the procedures for verifying the “Network” and “My Network Places” 
connection on Windows-based PCs are presented. “Network” and “My Network 
Places” allow a user to determine what computers are connected to a network. It also 
provides a way that other computers on the network can be accessed and their re- 
sources shared. (Note: Windows 98 and NT call “My Network Places” “Network 
Neighborhood.’) 

The techniques for accessing “Network” and “My Network Places” are divided 
into specific operating systems. Techniques for Windows Vista, Windows XP, 
Windows 2K, and Windows NT and 98 are presented. 


“Network,” Windows Vista 
Click Start—Control Panel—Network and Sharing Center—view computers 


and devices. This places you in the Vista equivalent of “My Network Places.” 


“My Network Places” on Windows XP 


1. Go to the Start menu and select My Computer as shown in Figure 14-61. 
2. This opens the My Computer window shown in Figure 14-62. Click My Net- 
work Places. 
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FIGURE 14-61 Selecting My Computer from the Start menu in Windows XP. 
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FIGURE 14-62 Selecting My Network Places in the My Computer window. 


3. This opens the My Network Places window shown in Figure 14-63. Click En- 
tire Network. 


g 
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FIGURE 14-63 The My Network Places menu. 


4. You will now see the Microsoft Windows Network icon in Figure 14-64 on the 
right side of the Entire Network menu. Double-click Microsoft Windows 
Network. 
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FIGURE 14-64 The Microsoft Windows Network icon in the Entire Network menu. 
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5. This opens the Microsoft Windows Network menu shown in Figure 14-65. You 
should now see your domain or workgroup in the menu on the right. 
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FIGURE 14-65 The Microsoft Windows Network menu showing the domains or workgroups. 


6. Double-click your domain name (for example, salsa) to see all of the comput- 
ers in your domain. An example is provided in Figure 14-66. Double-click the 
computer you want to connect to. 
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FIGURE 14-66 The computers in the salsa domain. 
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“My Network Places” on Windows 2000 


1. Double-click the My Network Places icon on your desktop. The icon is shown 
in Figure 14-67. 
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FIGURE 14-67 The My Network Places icon in Windows 2000. 


2. In the My Network Places window, double-click the Entire Network icon 
shown in Figure 14-68. 
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FIGURE 14-68 The Entire Network icon. 


3. In the Entire Network menu shown in Figure 14-69, click entire contents to 
view the entire contents of the network. 
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FIGURE 14-69 The Entire Network window. 


4. Now double-click the Microsoft Windows Network icon shown in Figure 
14-70. 
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FIGURE 14-70 The Microsoft Windows Network icon. 


5. In the Microsoft Windows Network window (shown in Figure 14-71), double- 
click your domain name (for example, salsa). 
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FIGURE 14-71 The Microsoft Windows Network window. 


6. A window will appear with the title of your domain (salsa). All of your 


network’s computers will be visible in this menu. An example is provided in 
Figure 14-72. 
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FIGURE 14-72 The salsa domain menu. 
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“Network Neighborhood” for Windows NT and 98 


1. On your desktop, double-click the Network Neighborhood icon, shown in 
Figure 14-73. 
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Network 
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FIGURE 14-73 The Network Neighborhood icon in Windows NT and 98. 


2. A window will appear with the title Network Neighborhood. Here all of your 
network’s computers will be visible. An example is provided in Figure 14-74. 


Ea Network Neighborhood 
File Edit View Help 


mi Nt workstation 


m Ntserver 
m \/indows2000pro 
mi wWindows98 





FIGURE 14-74 The display of the computers in the Network Neighborhood. 


14-6 CONFIGURING THE NETWORK SERVER'S 
ACCOUNT LOCKOUT POLICY 


A typical problem an administrator of a network server encounters is that a user in 
the network forgets his or her password, and the administrator must recover the lost 
password. This usually requires that the administrator delete the old password and ac- 
tivate a new one. (Note: The administrator cannot see the user’s password once the 
user has configured his or her own password at login.) 

Another problem network administrators encounter is when a user attempts to 
log in with an incorrect password or an unauthorized user is attempting to gain ac- 
cess to a user’s account. After a limited number of attempts, that user account is 
locked out. The following discussion provides an example of setting the server’s ac- 
count lockout policy, how to identify a locked-out account, and how to reactivate the 
account. 

The screen image shown in Figure 14-75 is for setting group policies. 
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FIGURE 14-75 The account lockout policy menu. 


In this example, the Account Lockout Policy is selected. There are three poli- 
cies listed: 


Account lockout duration 30 minutes 
Account lockout threshold 4 invalid logon attempts 
Reset account lockout counter after 30 minutes 


These policies set the account lockout threshold to four invalid logon attempts. 
This prevents an unauthorized user from attempting repeated logons. The user’s ac- 
count will have a red X placed on it, as shown in Figure 14-76, to indicate the user is 
locked out. Once the number of invalid logon attempts has been exceeded, the ac- 
count is locked out for 30 minutes. After 30 minutes the account is automatically re- 
set, or the network administrator can manually reset the account by double-clicking 
the locked-out user’s account name and clicking Enable Account, as shown in Fig- 
ure 14-77. A prompt will appear (Figure 14-78) that indicates the user’s account has 
been enabled. 
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FIGURE 14-76 The red X indicating a locked out user's account. 
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FIGURE 14-77 The menu for enabling a user's account. 
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FIGURE 14-78 The prompt indicating that a user's account has been enabled. 


net session Another network administrator task is advising the users on the network that 
Command that displays the the server needs to be taken offline for maintenance. In Windows server, the admin- 
current users connected to istrator can identify the users on the network using the command net session at the 
the server server’s command line prompt. An example of the information displayed with this 


command is shown in Figure 14-79. The net session command identifies the user’s 
name and the IP address of each computer currently logged on to the server. 


net send 

Command that allows a 
message to be sent over the 
network to a user [i CA WINNT\System32\\cmd.exe 


GC:\>Nnet session 

*\net’ is not recognized as an internal or external command, 
operable program or batch file. 

G:\>net session 


Computer User name 


-20.197.188 Windows 
-240.2.3 Windows 
-286.247.19 Windows 
-26.251.33 Windows 
-20.28.83 DRE Windows 
\\BFDEV1 BFDEV1$ Windows 


The command completed successfully. 


eh 





FIGURE 14-79 An example of using the net session command to display the users 
connected to the server. 
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Occasionally a message needs to be sent to a user or a group of users connected 
to the server. In Windows 2003 server, a message can be sent using the command net 
send, as shown in Figure 14-80. The user(s) will receive a prompt on their screen with 
the message from the server administrator. An example is provided in Figure 14-81. 
The structure of the net send command is as follows: 


net send /salsa sends the message to all computers currently connected to the 
salsa domain 
net send <username> sends the message only to the user currently connected 
to the server 


co’ C:\ WINNT \System32\\cmd.exe 


NET [ ACCOUNTS : COMPUTER : CONFIG : CONTINUE : FILE : GROUP : HELP 
HELPMSG : LOCALGROUP : NAME : PAUSE i PRINT : SEND i: SESSION i 
SHARE : START : STATISTICS : STOP i: TIME i: USE i: USER i: VIEW ] 


C:\>net send hit 
Sending files is no longer supported. 


More help is available by typing NET HELPMSG 3777. 


C:\>net send ? 
The syntax of this command is: 


NET SEND <name | * | /DOMAINE-namel] | /USERS}> message 


C:\>net send chip jsales Systems will reboot in 5 minutes. 
The message was successtully sent to jsales 





csc 


FIGURE 14-80 An example of using the net send command to notify the user “chip” that 
the system will reboot in five minutes. 


Messenger Service x| 


Message from SALSA tojsales on 7/12/2002 9:41:28 4M 


Systems will reboot in 5 minutes, 





FIGURE 14-81 An example of a message received by a user from the server. 


This section has provided an example of setting password policies and sending 
messages to users on the network. These aren’t the only issues a network administra- 
tor must address but are two of the more common tasks. 
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SUMMARY 


This chapter has presented an overview for configuring a Windows 2003/2000 server 
for use in a LAN. The major topics the student should understand include the 
following: 


e The different type of network servers 

e The procedures for adding computers, users, and groups to Windows 
2003/2000 server 

e The procedures and issues for setting network server policies 

e How to verify “My Network Places” on various Windows operating systems 

e How to configure the server’s account lockout policy 


QUESTIONS AND PROBLEMS 


Section 14-1 


What is the function of a network server? 
List five factors to be considered when configuring a LAN 
What is a client/server network? 
What is a peer-to-peer network? 
Which one of the following is a disadvantage of a peer-to-peer network? 
a. No centralized administration 
b. Does not depend on other networks 
c. A central file server 
d. Requires a network administrator 
List three advantages of the client/server network. 
Define an FTP server. 
Define a DNS server. 
Define a DHCP server. 


ee a 


ee 


Section 14-2 





10. Define Active Directory. 

11. What is the purpose of a domain controller? 
12. What is a forest? 

13. What is a tree? 


Section 14-3 


14. What is the most efficient way for a network administrator to add a computer 
running Windows XP? 

15. What is the purpose of a container in Windows 2008/2003? 

16. A computer that has no security attached to it is called what? 

17. Define organizational unit. 

18. What is a group in Windows 2008/2003 server? 
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Section 14-4 


19. What does it mean for a user to be authenticated? 
20. How does setting a policy affect a user currently logged on to the network? 
21. Discuss the issues of setting permissions and polices on a server. 


Section 14-5 


22. List two purposes of clicking “My Network Places” on a Windows-based PC. 
23. How do “Network,” “My Network Places,’ and “Network Neighborhood” 
differ? 


Section 14-6 


24. Why should a network administrator limit the number of logon attempts to a 
server? 
25. What must a network administrator do if a user in the network forgets his or her 
password? 
26. The command net session enables the network administrator to 
a. Determine the number of FTP sessions in progress 
b. Identify the users currently connected to the server 
c. Identify all user accounts on the server 
d. Notify the users the server is going down 
27. The command for sending a notice to all users on the chile network is 
a. net send all 


b. net send users 

c. net send chile users 

d. net send / chile 
Critical Thinking 


28. Assuming you are the administrator of a LAN server, what server policies 
would you implement? 
29. An authorized user on the network can’t log on. What would you check? 
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15-1 INTRODUCTION 


The objective of this chapter is to provide an overview of Linux networking from the 
point of view of an entry-level network administrator. This chapter guides the reader 
through many of the administrative procedures in Linux that the successful adminis- 
trator must understand. 

Section 15-2 discusses the process of logging on to Linux and adding a user ac- 
count using a Linux user manager. The issues of setting up accounts, establishing a 
home directory, specifying a user ID, and creating private groups are addressed. Sec- 
tion 15-3 examines the Linux file structure and the basic file commands needed to 
successfully navigate the system. Examples of file commands are presented. The 
Linux administration commands, in particular the operating details of the Red Hat 
Package Manager, are examined in section 15-4. Key issues examined are how to kill 
processes, shutting down the system, and mounting external drives. The steps for in- 
stalling applications such as telnet, telnet-server, SSH, and the Apache Web server are 
examined in section 15-5. An overview of Linux networking is presented in section 
15-6. This section demonstrates the use of the commands ifconfig, net mask, ifup, 
ifdown, and route and the steps for starting and stopping network processes. Tech- 
niques for troubleshooting Linux systems are presented in section 15-7. The chapter 
concludes with an overview of the Red Hat Linux management tools in section 15-8. 
This section introduces the various GUIs that can be used to manage and configure 
the system. 

Most of the examples presented in this chapter examine the use of Linux com- 
mands as entered from the terminal emulation mode (command line). Many of the 
commands presented are also available to the user via the Linux GUI (graphical user 
interface); however, most network administrators prefer using the command line. 

The question often arises: What are the differences between Linux and Unix”? 
The two systems have many similarities, but they are also quite different. There are 
many variants of Unix, and even though they are similar, many of the tasks performed 
on the system such as the installation of applications and devices and handling back- 
ups are unique to that version of Unix. This means that many administrators often 
have to specialize with a particular brand of Unix. 

Linux, on the other hand, is a standardized operating system and is receiving 
considerable vendor support. The Linux GUI has many improvements over standard 
Unix systems, and in fact the Linux approach is becoming the standard. While the 
Linux and Unix operating systems are unique, the commands and file structure are 
very similar. This means that the basic commands presented in this chapter are trans- 
portable to Unix machines. It should be noted that the examples presented in this 
chapter are based on the Red Hat distribution. Other distributions of Linux have many 
similarities, but they will also have a different set of administrative tools. 


15-2 LOGGING ON TO LINUX 


Root Access This section demonstrates how to log in to Linux, add a new user account, and log 
The user has the rights to out. This section assumes that Linux has already been installed on the user’s com- 
make changes to operating puter and the user has root privileges. (Note: Many of the examples presented in this 
and user parameters chapter require root access. Root access is the administrator mode for Linux—the 


root user has the rights to make changes to operating and user parameters.) 
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The first example demonstrates how to log in to the system. The Linux com- 
puter is first powered up, the system initializes, and the system logon screen is dis- 
played. This screen will prompt for the username and password. If this is a new 
installation of Linux, log on as root and complete the following steps to create a user 
account. 

A window will open for user login when Linux is running in a GUI (the default 
installation). This screen is where you enter the user account name and password. (If 
a user account has not been established, the administrator would log in as root to es- 
tablish the user account name.) Linux will prompt for the password or the default 
password if the system is just being set up. 


user account: root password: ******* 


Once logged into Linux (using the GUI interface), you will get a window sim- 
ilar to that shown in Figure 15-1. This is just one of the many possible Linux screens 
that can be displayed. The screens vary for each distribution for Linux. (Note: The 
root account should only be used for administration duties such as installing software, 
establishing user accounts, installing drivers, and so on. Major changes to the Linux 
machine system are possible with the root account access.) 


%, Programs Favorites Settings Desktop 12:23:49 PM ata 


~ 


root's Home 


H > 


Start Here 
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% 


floppy 





12:23 PM [oo # CC m fee 


FIGURE 15-1 The main Linux GUI window. 


Adding a User Account 


The easiest way to add a user to the Linux operating system is from the Linux main 
GUI. This is accomplished by clicking Program—System and then selecting the 
Users and Groups, as shown in Figure 15-2. This opens the Red Hat User Manager 
window shown in Figure 15-3. This window is used to add and delete users as well 
as modify user properties. The window shows there are no current users on the sys- 
tem. Click the New User icon, and this opens the Create New User window, shown 
in Figure 15-4. 
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FIGURE 15-2 Selecting the Red Hat User Manager. 
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FIGURE 15-3 The Red Hat User Manager window. 


User Mame: 
Full Name: 
Password: 


Confirm Password: 
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FIGURE 15-4 The Create New User Window. 
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A new user called usera will be created in this step, with the username being 
entered on the first line (see Figure 15-4). The username must be one continuous text 
entry containing no spaces. The full name is next entered followed by the password. 
The full name is used to map the username to a person. For example, usera doesn’t 
identify the name of the user on the account. The full name provides this information. 
The password entered is displayed with asterisks (*). This protects the privacy of the 
password. The next field requires that the password be reentered, to confirm that the 
password was correctly entered. The fifth line is for the login shell. The entry 
/bin/bash is pointing to the default Linux login shell. The login shell is used to set up 
the user’s initial operating environment. 

The check on Create home directory means that a home directory called 
/home/usera is being established, and this is where usera will be placed after logging 
in. The line Create a private group for the user is also checked. Any user being 
added to the Linux system can belong to an existing group or a new group can be cre- 
ated. In this case, a new group (usera) is being created. The concept of groups was 
explained in Chapter 14. The last line is used to Specify user ID manually. If this 
option is not checked, the system will select the next available user ID number. The 
concept of a user ID is explained in section 15-3. Click OK to complete this step and 
close the Create New User menu. 

The user account for usera has now been established, as shown in the Red Hat 
User Manager window (Figure 15-5). Notice the entries for the User ID (500), the 
Primary Group (User A), the Login Shell (/bin/bash), and the Home Directory 
(Jhome/usera). The next step is to log out as root and log in as usera. You can log out 
by clicking Desktop—Log Out in the Linux GUI screen, as shown in Figure 15-6. 
Once logged out, the login screen for Linux is displayed, except this time, the user 
can log on as usera. The user can also log out by entering the exit command from the 
command line. 
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FIGURE 15-5 The addition of the usera account displayed by the Red Hat User Manager. 


Network and system administrators typically use the command line for enter- Command Line 
ing most Linux commands. The command line is a text entry level for commands and A text entry level for 
is accessed from the main GUI window by clicking the Terminal emulation pro- commands 
gram icon shown in Figure 15-7. This will place you in the Linux command line, as 
shown in Figure 15-8. Notice the prompt is [usera @localhost usera]. This indicates 
that we are in usera’s home directory. The hostname of the Linux machine is localhost. 
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IGURE 15-6 Selecting the logout option for Linux. 
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FIGURE 15-7 Selecting the Terminal emulation program from the Linux GUI. 
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FIGURE 15-8 The Linux command line showing the prompt usera@localhost usera. 
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15-3 LINUX FILE STRUCTURE AND FILE 
COMMANDS 


The objective of this section is for the reader to learn both the Linux file structure and 
how to use Linux commands to view files, file contents, and directory contents. The 
following Linux commands are presented in this section: 


Listing Files: ls, Is -L, ls -la 

Displaying File Contents: more, cat 

Directory Operations: cd, pwd, mkdir, rmdir 

File Operations: rm, mv, cp 

Permissions and Ownership: chmod, chown, chgrp 


The file structure in Linux is fairly complex, especially for users who are used 
to a Windows graphical user interface. There will be some inclination for the new 
Linux user to try to use the Linux GUI for all command operations. You should avoid 
doing this because not all Linux GUIs are the same, and the command line operations 
are much faster and more flexible. This section demonstrates how to successfully 
navigate the Linux file structure and to use the commands listed. (Note: Readers who 
wish to learn Linux in more depth should see http://www.linux.org/docs.) 


Listing Files 


The ls Command The first command examined is ls. This command is used to dis- (s 

play the basic files in the directory and is executed from the command line, as shown List the basic files in the 
in Figure 15-9. In this example, the user is root, and the files examined are located in directory 

root’s home directory. 


File Edit Settings Help 








[r oot@localhost root ] # ls 
anaconda-ks.cfg install,log,.syslog 
install, log telnet 











FIGURE 15-9 The results of inputting the /s command from the command line. 


The ts -L Command The next file command examined is ls -1. This com- ls -l 
mand is called a long listing and lists file attributes, as shown in Figure 15-10. The Lists file attributes 
second file listed in Figure 15-10 is install.log. On the far left of the install.log line 
are the permissions for the file listed in 10 character spaces. The first space is reserved 
for indicating 1f this is a directory (d), character (c), or block (b), or no entry specified 
( ). In this case, no entry is specified for the install.log file ( ). 
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Hidden Files 

Files that start with a period 
and that can only be viewed 
with the ls -la or ls -al 
command 


ls -la 

Allows you to see hidden 
files in addition to the file 
attributes 


Bash 
Bourne again shell 


[root@localhost rootj# ls -1 

total 35/72 

-rW-P--r-- 1 root root 

-rw-r--r-- 1 root root 
W-Pr--P-- 1 root root 0 


1585 Jul 10 2002 anaconda-ks.cf¢ 
15200 Jul 10 2002 install.log 

Jul 10 2002 install, log.syslog 
n=-p-- 1 root root 421 Oct 9 16:34 telnet 





FIGURE 15-10 The results of inputting the ls -L command. 


The remaining nine character positions define three groups: the owner, the 
group, and everybody. Each group has three attribute settings—read, write, and exe- 
cutable. The attributes are turned on by setting the place value to “1.” The concept of 
file attributes is further explained under the chmod command later in this section. The 
attributes for the install.log file shown in Figure 15-10 are listed in Table 15-1. A sum- 
mary of the file attributes is provided in Table 15-2. 


TABLE 15-1 File Attributes for the install.log File (starting from the 
left) 
first character (-) means no attribute specified 


the owner has read/write privileges 
the group has read privileges only 
everyone has read privileges only 


characters 2-4 

charcters 5-7 

characters 8-10 

owner of the file is root 
the group is root 

file size = 15,200 bytes 
file created July 10, 2002 


owner (rw-) 


group (r--) 
Everyone else (r--) 


TABLE 15-2 Summary of the Attribute Abbreviations Used in the File 
Permissions Block 


d directory c Character 
b block r Read 

Ww write X Executable 
- not defined 


The ts -la Command The long listing command Is -l can be modified to al- 
low hidden files to be viewed by entering /s -la. The a extension instructs Linux to 
display all hidden files. Hidden files start with a period, such as . (home directory) and 
. (parent directory) and .bash_history and .bash_logout. The result of entering the ls- 
la command is provided in Figure 15-11. The Zs -la command can also be entered as 
ls -al. The ordering of the extension doesn’t matter. (Note: The bash files are applied 
to the shell that defines the environment the user works under. Bash stands for Bourne 
again Shell.) 
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File Edit 





Settings Help 


[root@localhost root]# ls -la 


total 3720 
druxr-K--- 
druxr-xr-% 
-rw-r--r-- 


-ru-r--r-- 
-ru-r--r-- 
-rw-r--r-- 


-rw-r--r-- 
-ru-r--r-- 
-ru-r--r-- 
-ru-r--r-- 


FIGURE 15-11 The results 


20 root root 
19 root root 
1 root root 
1 root root 
1 root root 
1 root root 
1 root root 
2 root root 
1 root root 
1 root root 
1 root root 
1 root root 


Displaying File Contents 


4096 
4096 
1585 
6472 
24 
234 
176 
4096 
210 


Jan 
Jan 
Jul 
Jan 
Jun 
Jul 
Aug 
Oct 
Jun 


15200 Jul 
0 Jul 10 
321 Oct 9 16:34 telnet 


25 
10 
10 


12:24 
12:18 


2002 anaconda-ks.cfg 
12318 .bash_history 
2000 ,bash_logout 


2001 ,bash_profile 
1995 „bashrc 

14:48 

2000 ,cshrc 

2002 install, log 


2002 install, log,syslog 


of entering the ls -la command. 


The more Command The next file command demonstrated is more. This com- more 


mand is used in Linux to display the contents of a text file at a pace the user controls 


using the spacebar. An example of using the more command is provided in Figure 15- display the contents of a 


12. This example uses the command to display the contents of the install.log file. If 


text file 


the information in the file exceeds one screen, a prompt is displayed indicating how 
much of the file contents have been displayed. In this example (Figure 15-12) 5 per- 
cent of the file contents has been displayed. Pressing the spacebar will display the 
next page of contents of the install.log file contents, and the prompt at the bottom of 
the screen will display the new percentage that has been viewed. Press the spacebar 
to keep displaying the file contents until they have all been displayed or press Con- 
trol C to exit the more command. 


File Edit 


Settings Help 


[root@localhost root]# more install.log 


Installing 
Installing 


Installing 
Installing 
Installing 
Installing 
Installing 
Installing 


Installing 
Installing 
Installing 
Installing 
Installing 
Installing 
Installing 
Installing 


Installing 


510 packages 


g libc-common-2,.2,5-34, 
hudata-0,14-1, 
indexhtml-? .3-3, 
mailcap-2,1,9-2, 
man-pages-1,48-2, 
redhat-logos-1.1.3-1. 
setup-2,5,12-1, 
filesystem-2,1,.6-2, 
basesyustem-/ ,0-2, 
glibe-2?,2?,5-34, 
bdflush-1,5-17, 
bzip2-libs-1,0,2-2, 
chkconfig-1,.3,5-3, 
cracklib-2,7-15, 
dbi-1,85-8, 

db2-2 .4,14-10, 
db3-3.3,11-6, 
dosfstools-2,.8-1, 
e2fsprogs-1,27-3, 

e ject-2.0,12-4, 
file-3,37-5, 
gdbm-1,8,0-14, 
glib-1,2,10-5, 
glib2-2,0,1-2, 
hdparm-4,6-1, 
hesiod-3,0,2-18, 
iputils-20020124-3, 
ksymoops-2,4,4-1, 





FIGURE 15-12 An example of using the more command. 
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cat The cat Command The next file command used to display file contents is 
Command used to print the cat, which stands for concatenate. This command is used to print the file text to the 
file text to the screen screen and works fine as long as the contents of the file will fit on one screen. If the 
file is larger than one screen, then the text will quickly scroll by. In the case of a large 
file, it is probably best to use the more command so that the contents of each page 
can be viewed. The advantage of cat is that it can be tied to other programs. This will 
be demonstrated later in the chapter. 
An example of using the cat command is provided in Figure 15-13. In this ex- 
ample, cat is being used to view the contents of the password file in the /etc directory. 
The command cat /etc/passwd is being used, as shown in Figure 15-13. Notice 
that the command prompt is displayed at both the top and the bottom of the screen, 
indicating that the entire contents of the password file are displayed. 


nn" BX 


File Edit Settings Help 


[r ‘Or mo alhost root]# Er at fetc fpasswd 
root:x:0:0troot: froot: ‘bin/bash 
bint> st 1ibin:, /binz, in/ nalog in 
daemon: 
















it sinih 
nin/ ‘halt 
ool/mail: ee 
001 / news 







J 16: eae J 
operator :x 11:0: :operator 
gal Sixt) 






















elen 
hya iar Ak 

sole memory owner?t/dev:/sbin/nologin 
var /spoo1/ mqueue:/dev/ mull 

ar/ aaa /bin/ hash 






rpc TA "RPC us sbin/nologin 

5 32K Font Ser: ver? eee 1/ ‘fst/bin/false 

fyarfedmt/ isbin/ ‘nolog rin 

RPC < Service Userz/'s far, j lib/nfs: /sbin/nologin 

54 3695.34 3 Anonymous NFS User: :/var; /lib/nfs:/sbin/nologin 
) lin/fals x= 

:in/nologin 

\in/false 

:/bin/bash 

etwo 6300 inetu ing:/hone/ network bin/bash 

[root@localhost “root ]# D = 





FIGURE 15-13 An example of using the cat command. 


The password file contains the accounts of users and processes that can log on 
to the Linux operating system. The contents of each entry in the password file are di- 
vided into seven fields, and each file is divided by a colon (:). For example, the first 
line displayed is root:x:0:0:root:/root:/bin/bash. The first field specifies that the ac- 
count 1s root. The root user can delete, modify, or do anything with the file. This en- 
try is followed by an x. The x (in Unix) is where the encrypted password would be. 
In Linux, the encrypted passwords have been moved for security purposes to a file 
called shadow. During installation the option to shadow passwords is normally pre- 
sented. If the person doing the installation decides not to shadow passwords, then the 
passwd file will contain the passwords. Some versions of Linux will also let you store 
the password in an unencrypted format. After x comes a colon followed by a zero. The 
zero is the user ID. This is a unique ID assigned to each account. This identifier is 
used throughout the Linux operating system to identify users and their files. Another 
zero follows the user ID. This is the group ID. Notice at the very bottom of Figure 
15-13 that the entry in the field for the usera user ID is 500. Refer back to Figure 15-5 
to see where this ID was assigned. The root account belongs to the zero ID. Any user 
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that belongs to the zero group belongs to the same group as root. After the second 
zero is :root. This root is the account description for the account. After this field is 
:-/root, which is the home directory for the account. The user is placed into this ac- 
count when logged on to the system. The last field is -/bin/bash. This defines the ex- 
ecutable program that is used during user logon. In this case, bash is the command 
shell that will run. 


Directory Operations 


The cd Command The command to change directories in Linux is cd. The struc- Cd 

ture for the cd command is ed [destination-directory]. The command cd was used to Command for changing 
change to the root directory / as shown in Figure 15-14. At that point, the command __ “irectories 

ls -l was entered. This produces the results shown in Figure 15-14. This provides a 

long listing of the components of the root directory. The following are the directories 

normally encountered in the Linux file system that will always be there: 


File Edit Settings Help 





[root@localhost root ]#cd/ 
[root@localhost /]# Is -1 
total 160 
druxp-xp-x 2 root root 4096 Jul 10 2002 bin 
drwxr-xr-x 2 root root 4096 Jul 10 2002 boot 
drwxr-xr-x 18 root root 86016 Jan 10 14:17 dey 
drwxr-xr-x 53 root root 4096 Jan 13 14:36 etc 
drwxr-xr-x 6 root root 4096 Oct 25 14:54 home 
drwxr-xr-x 7 root root 4096 Jul 10 2002 lib 
2 root root 16384 Jul 10 2002 lost+found 
druxr-xr-x 5 root root 4096 Jul 10 2002 mnt 
druxr-xr-x 2 root root 4096 Aug 23 1999 opt 
dr-xr-xr-x 68 root root 0 Jan 10 08:15 proc 
druxr-x--- 20 root root 4096 Jan 15 12:46 root 
drwxr-xr-x 2 root root 4096 Jul 10 2002 sbin 
drwxsr-xrut 8 root root 4096 Jan 15 12:18 tap 
druxp-xp-x 16 root root 4096 Jan 13 14:38 usr 
drwxr-xr-x 16 root root 4096 Jul 10 2002 var 
[root@localhost /]# 








FIGURE 15-14 The long listing of the components in the root directory. 


e /bin: This contains all of the binary programs and executables. 

e /boot: This is where the Linux kernel resides. A kernel is the actual operating 
system image that boots up when the computer is turned on. If the kernel is not 
there, Linux does not boot. 

e /dev: This is where the device files reside. Examples of device files are drivers 
for the monitor, keyboard, modem, and hard drive. 

e /etc: This is where Linux holds the majority of its configuration files. For ex- 
ample, a program running under Linux will have its configuration files located 
in /etc. 

e /home: This is the directory where all user directories are located. Home 
directories for new user accounts are placed in this directory. 

e /lib: The location for libraries that Linux uses, such as static and shared 
libraries. 

e /lost+found: This directory is used to place files that have lost their identity, 
possibly due to hard drive errors. 

e /mnt: The location where mounted directories are located. For example, an ex- 
ternal drive will be mounted through this directory. Mount means that a file sys- 
tem has been made available to the user. 
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e /proc: The status of the operating system is kept in this directory—for memory, 
hard drive, device drivers, memory usage, uptime (how long the computer has 
been running), and user IDs. 

e /root: This is the root user ID home directory and is where the root user is 
placed at login. 

e /sbin: This is the system binary directory, the location where Linux keeps its 
system and executable program files. 

e /tmp: This directory is used as a temporary holding area for applications. This 
directory is available to all users logged onto the machine. The /tmp directory 
gets cleared out when the machine boots up. 

e /usr: This is the location for the user files that are related to the user programs. 

e /var: The files in this directory change over time. For example, system log files 
and mail folders appear here. From time to time, the system administrator will 
delete files in /var to clean up the drive. 


pwd The pwd Command The next command examined is pwd (print working di- 
Command to print the rectory). The Linux directory path is complicated, and this command is available for 
working (current) directory the user to find where he or she is currently located. This is very useful when files are 


being moved or deleted. The user uses the pwd command to verify the current work- 
ing directory. An example is shown in Figure 15-15. 





File Edit Settings Help 


[usera@localhost usera ]$ pud 
/home/usera 

[usera@localhost usera ]$ cd /tmp 
[usera@localhost tmp]$ 








FIGURE 15-15 An example of the text displayed when entering the pwd command. 


In this example, pwd returns /home/userda/, indicating we are in usera’s direc- 
tory. The following information is returned by the pwd command: 


usera account name 
@ localhost the name of the Linux machine 
usera the name of the current directory 


The second part of Figure 15-15 demonstrates that the name of the current di- 
rectory changes if the directory changes. The third line shows that the command cd 
tmp (change directory tmp) is used to change the working directory to tmp. The 
prompt now displays [usera@localhost tmp], indicating that the current directory 


is tmp. 
mkdir The mkdir and rmdir Commands This part demonstrates the Linux com- 
Command to make a mand for creating or making a directory. The command is mkdir, for make directory. 
directory The structure for the command is mkdir [directory-name]. In this example (shown in 
rmdir Figure 15-16), mkdir files is used to create a directory called files. The command Is 
ATAR T E is used to display the usera home directory contents and files is listed. The long list- 
directory ing of the directory using the Is -la command shows that files is indeed a directory, 


indicated by a d in the leftmost field of the attributes. The command to remove a di- 
rectory is rmdir. The structure for the command is rmdir [directory-name]. This 
command requires that the directory being removed is empty. 
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[usera@localhost usera]$ mkdir files 
[usera@localhost usera]$ ls 

test txt 
[usera@localhost usera]$ ls -la 
total 44 


usera 4096 Jan 23 13: r 
drwxr-xr-x 4 root root 4096 Jan 23 12: ae 
-ru-r---- 1 usera usera 24 Apr 12 -bash_ logout 


-rw-r--r-- 1 usera usera 191 Apr 12 -bash_profile 
-Py-r--p-- 1 usera usera 124 Apr 12 „bashrc 
-puw-r--r-- 1 usera usera 854 Apr 8 „emacs 
druxruxr—x 2 usera usera 4096 Jan 23 13:01 files 
-rw-r--r-- 1 usera usera 118 Apr 15 gtkrc 

1 usera usera 22 Jan 23 12:47 test5,txt 

1 usera usera 781 Jan 23 12: .viminfo 

1 usera 66 Jan 23 -xauthAeCe3U 





FIGURE 15-16 An example of creating a directory using the mkdir command. 


File Operations 


The rm Command The purpose of a basic operating system is to create, modify, rm 

and delete files. The next example shows how to delete files in Linux. The command Command to delete a file 
to delete a file is rm, short for remove. The command structure is rm [filename]. The 

command Is -al has been entered to display a long listing of files and hidden files in 

the directory (Figure 15-17). 


File Edit Settings Help 


[usera@localhost usera]$ ls -la 
total 44 





usera usera 12348 . 

root root 12:45 .. 

usera usera 2002 ,bash_logout 
usera usera 2002 ,bash_profile 
usera usera 2002 „bashrc 
usera usera 2002 „emacs 

usera usera 2002 „gtkrc 

usera usera 12347 test1,txt 
usera usera 12348 test2.txt 
usera usera 12348 .viminfo 

1 usera usera 66 12347  .xauthAeCe3U 
rm test? txt 


drwxr-xr-x 
of a ia 
Pitt- 
-rw-r--r-- 
yoo. 
-Pw-r--r-- 
-Pw-ru-r-- 
a-Tar== 


PRR RRP RRR Bh 


[usera@localhost usera]$ 
[usera@localhost usera]$ ls -la 
total 40 


usera usera 

drwxr-xr-x root root >s 

-Pw-r--r-- usera usera „bash_logout 

-ruw-r--r-- usera usera -bash_profile 

-Pw-P--P-- usera usera „bashrc 

-rw-r--r-- usera usera „emacs 

-rw-r--r-- usera usera 2 „gtkrc 

-rw-ru-r-- usera usera t47 testi.txt 
usera usera : ¥iminfo 

usera .xauthAeCe3U 





FIGURE 15-17 Using the rm command to remove a file in Linux. 


Notice that the directory contains two text files called test/.txt and test2.txt. The 
attributes for these files are listed on the left. These are read/write (rw) for the user, 
read/write (rw) for the group, and read only (r) for others. This means that any user 
in the group usera can also change the usera file. The owner of the file is usera, and 
the group is also usera. The next number is the file size, followed by the date and time 
the file was created and, lastly, the file name. 
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In this example, the file test2.txt will be removed using the command rm 
test2.txt. This is shown in Figure 15-17. The test2.txt file is shown in the top of the 
screen. The command rm test2.txt is entered, and the files are redisplayed using ls - 
la, and the text2.txt file is no longer listed. The file has been deleted. It is important 
to note that in the Linux file system there is not an undo option. This means that once 
a file is deleted, it is gone. What about a trash bin? Linux does not provide a trash bin 
to temporarily hold deleted files, but there are certain Linux GUIs that do apply this 
concept. 

The mv Command The next example demonstrates how to move a file in 
Linux. The command to move a file is my, short for move. The mv command serves 
two purposes. It is used to rename a file, and it is used to move the file to a different 
directory. The command structure is mv [filename] [new-filename]. 


mv In this example, the my command is used to rename the file text/.txt to text5. txt. 
Command for moving or The steps for doing this are shown in Figure 15-18. In this example, the cat command 
renaming a file is used to display the contents of the test/.txt file. This is being done so that the con- 


tents of the files can be compared after the move. The mv command is next used to 
rename text/.txt to test5.txt. The contents of the test5.txt file are displayed using the 
cat command, showing that the contents of fest/.txt and test5.txt are the same and 
only the filename has changed. 


f 
(l 
g 


z = cm 


File Edit Settings Help 
[usera@localhost usera]$ cat testi,txt a| 
This is a fake file, 

@localhost usera]$ my test1,txt test5,txt 
‘a@localhost usera]$ cat test5,txt 
s a fake file, 


User 
This 





[ usera 
pe 













[usera@localhost usera]$ 





FIGURE 15-18 An example of using the mv command to rename a file. 


The next step is to show that files can be moved from one directory to another 
using the mv command. In this case, the test5.txt file will be moved from the usera 
directory to the usera/files subdirectory. The command for doing this is mv test5.txt 
files/, as shown in Figure 15-19. This specifies that the test5.txt file is to be moved to 
the files directory using the directory path files/ A logical next step is to verify that 
the file was moved to the files directory. The command cd files is entered, changing 
the working directory to files, as shown in Figure 15-19. The prompt now displays 
[usera@ localhost files]. The command pwd (print working directory) also shows that 
the working directory is now /home/usera/files. The information for the prompt and 
for print working directory is slightly different, but both indicate that the working di- 
rectory is files. The ls command shows that the fest5.txt file has indeed been moved 
to the files directory. The long listing /s -la shows that the file properties have not 
changed. The owner of the file and group assignment have not changed. 
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ana 


File Edit Settings Help 
a| 


[useraĝlocalhost usera]$ my test5,txt files/ 
[usera@localhost usera]$ 
[usera@localhost usera]$ cd files 
[usera@localhost files ]$ pud 
/hone/usera/f iles 
[usera@localhost files]$ ls 
test5 txt 
[usera@localhost files]$ ls -la 
total 12 
Aru rwr- 2 usera usera 4096 Jan 23 13:03 . 
3 usera usera 4096 Jan 23 13:03 .. 
-rw-rw-r-- 1 usera usera 22 Jan 23 12:47 test5,txt 
[usera@localhost files]$ 





FIGURE 15-19 An example of moving a file using the mv command. 


The cp Command The command to copy files in Linux is cp. The structure cp 

of the command is cp [source filename] [destination filename]. In this example, a Command to copy files 
file called test5.txt will be copied to a new file called test6.txt. The ls command is first 

used to display the files in the usera@localhost files directory as shown in Figure 

15-20. The only file listed is test5.txt. The cp command is next used to copy the file 

to test6.txt, as shown in Figure 15-20. The /s command is used again to display the 

directory contents, and both files fest5.txt and test6.txt are now displayed. The file 

was successfully copied. 


File Edit Settings Help 





[usera@localhost files]$ ls 
test6 txt 


[usera@localhost files]$ cp test5.txt test6,txt 
[usera@localhost files ]$ ls 

test5 txt test6.txt 

[usera@localhost files]$ [ 








FIGURE 15-20 An example of using the cp command. 


Permissions and Ownership 


The chmod Command The chmod command is used in Linux to change permis- chmod 

sions on files and directories. The structure of the command is chmod [permissions | Command used in Linux to 
setting] [filename]. For example, this command lets you specify if the file is readable change permissions on files 
(r), writable (w), or executable (x). A long list of the files in the usera account (Fig- 4d directories 

ure 15-21) shows that the file test5.txt has rw in the attributes in the owner’s space. 

File test6.txt shows that the user has read (r)/write (w) privileges, the group has read 

(r)/write (w) privileges, and the outside world has read (r) privileges (-rw-rw-r--). 
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[usera@localhost files]$ ls -1 

total 8 

-PW------- 1 usera usera 22 Jan 23 12:47 test5.txt 
-rw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 
[usera@localhost files]$ chmod 640 test5,txt 

[usera@localhost files]$ ls -1 


total 8 
-rw-r----- 1 usera usera 22 Jan 23 12:47 test5,txt 
-rw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 


[usera@localhost files]$ chmod 644 test5,txt 
[usera@localhost files]$ ls -1 
18 


-PW-P--P-- 1 usera usera 22 Jan 23 12:47 test5,txt 
-rw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 
[usera@localhost files]$ chmod 744 test5,txt 

[usera@localhost files]$ ls -1 


total 8 
-rwxr--r-- 1 usera usera 22 Jan 23 12:47 test5.txt 
-rw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 


[usera@localhost files]$ 
[usera@localhost files]$ [ 








FIGURE 15-21 Using the chmod command to set file permissions. 


Chmod uses a value to turn a privilege on or off. The value is specified for the 
owner, the group, and others. Table 15-3 shows how the place values are established 
for the owner, group, and outside user. For example, a value of 4 0 0 turns on bit po- 
sition 2, the read attribute for the owner (-r ). A value of 6 0 0 turns on bit positions 2 
and 3, read and write for the owner (-rw ) and a value of 7 0 0 turns on bits 2, 3, and 
4, setting read, write, and executable permissions for the owner (-rwx ). A value of 6 
4 0 turns on bits 2, 3, and 5, setting read and write permissions for the owner and read 
permission for the group (-rw -r- ---). 


TABLE 15-3 Attribute Settings for File Permissions 


Bit position 1 8 9 10 
directory others 
Bit Values 4 2 1 
r w x 





The directory bit can display the following attributes: 
d—directory 

b—block 

c—character 

—no entry specified 


Another way to determine the permission settings for each permission field 
(owner, group, others) is to assign the following values to each permission: 


read—4 
write—2 
executable—1 


To turn on the read permission for the owner simply requires that a four (4) be 
placed in the first permission field. For example, chmod 4 0 0 [filename] sets read 
only permissions for the owner. 

Turning on more than one permission requires that the sum of the permission 
values be entered. For example, turning on read/write privileges for the owner 
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requires entering a six (6) in the proper permission field. The value is determined as 
follows: 


read 4 
write 2 
executable O 


The zero is assigned to the executable because this permission is not desired. 
The command to enable read/write privileges for the owner is chmod 6 0 0 
[filename]. 

The same steps can be applied to assigning permissions to all fields. For ex- 
ample, assume that the following permissions are specified: 


owner read, write, executable 
group read, executable 
everyone read, executable 


The numeric entry for each permission field in the chmod command can be de- 
termined as follows: 


owner group others 
read 4 A A 
write 2 0 0 
executable 1 1 1 
7 5 5 


Therefore, the command chmod 7 5 5 [filename] is used to set the permissions 
for the owner, group, and others. 

In the example shown in Figure 15-21, read permission is to be given to the 
group for the test5.txt file. The command chmod 640 test5.txt is entered. The 6 sets 
the read/write privilege for the owner, the 4 sets the permission to read for the group, 
and the 0 clears any attributes for others. The /s command is next used to provide a 
long listing of the files in the usera account. The attributes for the test5.txt file have 
changed to (r w -r ---- - ), indicating that group now has read privileges. 

In the next step, the world will be given the privilege to read the test35.txt file. 

The command chmod 644 test5.txt is entered. Once again, the 6 sets the read/write 
privilege for the owner, the 4 sets the permission to read for the group, and the next 
4 sets the permission for others to read the file. The attributes for the test5.txt file have 
now changed to (r w -r - - r - -), indicating that outside users have read privileges. 

The last example using chmod shows how to set the executable (x) permission Executable (x) 
for a file. An executable permission allows the program or script to run. The com- Permission 
mand chmod 744 test5.txt is entered. This instruction gives the owner read/write and Allows the program or script 
executable privileges on the file and also grants the group and everyone else read per- to run 
mission. The /s command is used to display a long listing. The attributes for the file 
test).txt now show (rw xr--r--). This confirms that the permissions have been prop- 
erly set. The result is shown in Figure 15-21. 

The executable setting is used by Linux to distinguish files that can be executed 
(run) on the system. Files that do not have an x attribute are considered to be data files, 
libraries, and so on. The x is also used by Linux when the system searches for exe- 
cutable files on the hard drive. 
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chown The chown Command The next Linux command examined is chown, 
Command used in Linux to which is used to change the ownership of the file. The structure of the command is 
change ownership of a file chown [new owner] [filename]. This command can only be applied to files the user 
owns. The exception to this is root (the superuser), who can change permissions on 
any files. In this example, the ownership of the test5.txt file is going to be changed to 
a user called network. (Note: The new owner will be network, a user on this same 
Linux machine. In fact, changing ownership can only be done using existing users.) 
The long list of usera’s files directory shows two files, test5.txt and test6.txt (Figure 
15-22). The owner of test5.txt is usera. The objective of this exercise is to change 
ownership of the test5.txt file to network. The command chown network text5.txt is 
entered. A long list of the directory now shows that the ownership of test5.txt now re- 
sides with network. The steps for changing file ownership are shown in Figure 15-22. 


Srusera/iies ETS ex] 


File Edit Settings Help 


[root@localhost files]# ls -1 
t 8 


otal 

-Puxr--r-- 1 usera usera 22 Jan 23 12:47 test5.txt 
-Pw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 
[root@localhost files]# chown network test5,txt 

[root@localhost files]# ls -1 

total 8 

-rWxr--r-- 1 network usera 22 Jan 23 12:47 test5.txt 
-rw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 
[root@localhost files]# JJ 





FIGURE 15-22 An example of using the chown command to change file ownership. 


The file is still in usera’s directory, but the ownership has changed to network. 
The group attributes (permissions) will now have to be set by network if usera is to 
have permission to read, write, or execute this file, even though usera was the past 
owner and the file is in usera’s space. In fact, if usera tries to change permission on 
this file (test5.txt), Linux will prompt usera with the message changing permissions 
of ‘test5.txt’: Operation not permitted 

This is shown in Figure 15-23. 


EEE | AE 
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[usera@localhost files]$ chmod 755 test5,txt 


chmod: changing permissions of ‘test5.txt': Operation not permitted 
[usera@localhost files]$ {J 





FIGURE 15-23 The prompt displayed when an unauthorized user attempts to change file 


permissions. 
chgrp The chgrp Command The Linux command chgrp is used to change group 
Command used in Linux to ownership of files. The structure of the command is chgrp [new group] [filename]. 


change group ownership ofa This example demonstrates how to change the group ownership of a file. In this ex- 
file ample, the group for file test5.txt will be changed. The steps for this are shown in Fig- 
ure 15-24. A long listing of the usera files directory shows that the group associated 
with fest5.txt is usera. The command chgrp mail test5.txt is next used to change 
group ownership of the file to mail. The long listing command is used again to list 
the file in the usera files directory. The screen shows that the owner is network and 
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the group ownership of test5.txt has changed from usera to mail. This means that any 
members of the group mail now have read (r -) privileges. 
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[root@localhost files]# ls -1 zj 
total 8 

-Puxr--r-- 1 network usera 22 Jan 23 12:47 test5.txt 

-rw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 


[root@localhost files] cherp mail test5,txt 

[root@localhost files]# ls -1 

total 8 

-PuxP--P-- 1 network mail 22 Jan 23 12:47 test5.txt 
-Pw-rw-r-- 1 usera usera 22 Jan 28 12:17 test6,txt 
[root@localhost files]# JJ 





FIGURE 15-24 An example of changing the group ownership of a file. 


15-4 LINUX ADMINISTRATION COMMANDS 


The objective of this section is for the reader to gain an understanding of the key 
Linux administration commands. The commands presented focus on those most of- 
ten used by the network administrator: 


man: Used to display the online text manual 

ps: Used to examine processes running on the machine 
su: Used to become another user on the system 

mount: Used in Linux to mount an external drive 
shutdown: Used to shut the Linux system down gracefully 


This section concludes with an overview of some basic Linux shortcuts that 
will help simplify the administrator’s job. 


The man (manual) Command 


The first command examined is man, used to display the online text manual for man 
Linux. Manual pages for most Linux commands and features are available by simply Command used to display 
entering the command man followed by the name of the option. For example, if the the online text manual for 
user wants to know how to use the ps command, entering man ps (Figure 15-25) will Linux 
display the contents of the manual lists for ps (Figure 15-26). 
The manual pages provide extensive information about how to invoke the 
command, what options are available, what the fields mean that are displayed by the 
command—basically everything the user needs to know about the ps command. 
There are many man pages on the Linux system, for utility programs, program- 
ming files, networking commands, and others. Adding the -k extension to the man 
command (for example, man -k network) instructs Linux to list all of the man pages 
that mention the specified topic. An example is provided (Figure 15-27) that demon- 
strates how to use the man -k command to view all network-related man pages. 
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File Edit Settings Help 


-[root@localhost root ]# man ps 
-[root@localhost root ]# 





FIGURE 15-25 An example of using the man command. 


=| PILE 
File Edit Settings Help | 
PS(1) Linux User's Manual PS(1) «| 


NAHE 

ps - report process status 
SYNOPSIS 

ps [options] 
DESCRIPTION 


ps gives a snapshot of the current processes, If you want a repetitive 
update of this status, use top, This man page documents the /proc-based 
version of ps, or tries to, 


COMMAND-LINE OPTIONS 
This version of ps accepts several kinds of options, 
Unix98 options may be grouped and must be preceeded by a dash, 
BSD options may be grouped and must not be used with a dash, 
GNU long options are preceeded by two dashes, 
Options of different types may be freely mixed, 


Set the I_WANT_A_BROKEN_PS environment variable to force BSD syntax even 
when options are preceeded by a dash, The PS_PERSONALITY environment 
variable (described below) provides more detailed control of ps behav- 


ior, 
SIMPLE PROCESS SELECTION 
7 Description O 


[Kil 


FIGURE 15-26 The manual pages displayed by entering the command man ps. 









File Edit Settings Help | 
[root@localhost root]# man -k network aj 
Net::Cmd (3pm) - Network Command class (as used by FTP, SMTP etc) | 
Net?:Time (3pm) - time and daytime network client interface 






(74) - a portable, network-transparent window system 
endhostent [gethostbhyname] (3) - get network host entry 
getaddrinfo 3) - network address and service translation 
gethostbyaddr [gethostbyname] (3) - get network host entry 
gethostbyname 3) - get network host entry 
herror [gethostbyname] (3) - get network host entry 
hstrerror [gethostbyname] (3) - get network host entry 

















htonl [byteorder ] (3) - convert values between host and network byte order 
htons [byteorder ] (3) - convert values between host and network byte order 
ifconfig (8) - configure a network interface 

inet_network [inet] (3) - Internet address manipulation routines 

inet_ntop (3) - Parse network address structures 

inet_pton (3) - Create a network address structure 

nameif (8) - name network interfaces based on MAC addresses 
netdevice (7) - Low level access to Linux network devices 
netreport (1) - request notification of network interface changes 
netstat (8) - Print network connections, routing tables, interface statist 
ics, masquerade connections, and multicast memberships 

nhfsstone (8) - Network File System benchmark program 

nkf (1) - Network Kanji code conversion Filter v1.9 






Network exploration tool and security scanner 

convert values between host and network byte order 

convert values between host and network byte order 

per lfaq9 (1) Networking ($Revision: 1,26 $, $Date: 1999/05/23 16:08:30 $) 
ping (8) send ICMP ECHO_REQUEST to network hosts 

ping6 [ping] (8) - send ICMP ECHO_REQUEST to network hosts 

png ( - Portable Network Graphics (PNG) format | 
| pngtopnm - convert a Portable Network Graphics file into a portable any |=| 


nmap (1) 
ntohl [byteorder] (3) 
ntohs [byteorder ] (3) 























FIGURE 15-27 Using the man command to display all pages related to network. 
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The ps (processes) Command 


The ps command lists the processes (or programs) running on the machine. The com- 
mand ps wx lists all of the processes running, as shown in Figure 15-28. Each of the 


fields returned by the ps command is listed from left to right in Table 15-4. 
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[root@localhost root]# ps ux 
USER PID CPU MEM vS 





STAT START COMMAND 
S Janig 0:04 init 

Jan18 
Jan1é 
Jan18 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan18 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan18 
Jan1é 
Jan1é 
Jan1é 
Jan1é 
Jan2? 
Jan2? 
12:13 


root 1368 
root 
root 
root 
root 
root 
root 


[keventd] 


[kapmd ] 

[ksoftirqd_CPUO] 

[kswapd ] 

[bdf lush] 

[kupdated ] 

[mdrecoverud ] 

[k journald ] 

[khubd ] 

[k journald] 

syslogd -m 0 

klogd -x 

fusr/sbin/apmd -p 10 -w 5 
xinetd -stayalive -reuse 
sendmail: accepting conne 
gpm -t ps/2 -m /dev/mouse 
crond 

/sbin/mingetty ttyl 
/sbin/mingetty tty? 
/sbin/mingetty tty3 
/sbin/mingetty tty4 
/sbin/mingetty tty5 
/sbin/mingetty tty6 
fusr/bin/gdm -nodaemon 
esd -terminate -nobeeps - 
:00 /usr/bin/gdm -nodaemon 
112 fusr/bin/K11/K :0 -auth / 
701 /usr/bin/gnome-session 


ecoccoccoccscS 
ecocoococccoccS 

AAA A494 44395495 

-L 
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0,0 
0,0 
0,0 
0,0 
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0,0 
0,0 
0,0 
0,0 
0,0 
0,0 
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0,0 
0,0 
0,0 
0,0 
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FIGURE 15-28 An example of using the ps command to list the processes currently 


running on a Linux machine. 


TABLE 15-4 Fields Returned by Inputting the ps Command 


User Identifies the owner of the process. 


PID Identifies the process ID, which is a number assigned to a process when 
it starts. For example, if PID1, then this is the first process started on 


the machine. 


%CPU Shows the % utilization of the CPU for that process. 
%MEM Specifies the % of memory being used by that process. 
VSZ The virtual size of the program. 
RSS Shows how much of the program (resident set size) is in memory. 
TTY Indicates if the process is interfacing with a terminal or a serial port. 
STAT The STAT (state field) indicates the status of the process: 
r—running 
z—zombie 
s—sleeping 
t—stopped 
START Indicates when the process started. This could list a time of minutes, 


hours, and/or days. It is not uncommon to have a process running for 


an extended period on Linux. 
Time Indicates the time the process has actually spent running. 
Command Lists the actual command that was invoked to start the process. 


ps 
Command used to list 
processes running on the 


machine 


PID 
Process ID 
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The reason to examine running processes is to determine what processes are us- 
ing the most machine resources. If a machine is running slowly, the ps command can 
be used to determine what process is using the majority of the CPU time. In some 
cases, it becomes necessary to terminate (shut down) a process to free up the ma- 
chine’s resources. The following are steps that should be followed to shut down a 
process. 


1. Use the ps command to identify the process using the computer’s resources 
(CPU and memory). Determine the PID for the process. For example, it has 
been determined that a process with a PID of 1023 must be shut down. 

2. The network administrator should next contact the user of the process and in- 
form him or her to shut down (kill) the process. 


kill [PID], kill -9 [PID] 3. The command for killing the process 1s kill [PID]. An example is shown in Fig- 
Commands used to kill a ure 15-29 for killing the process 1023. This command notifies the process to 
process 


terminate. The process then begins closing files and libraries and shuts down 
immediately. Some processes are difficult to kill, so the command kill -9 [PID] 
can be used. An example is shown in Figure 15-29. This is the last-resort step 
for killing a process. The kill -9 command is somewhat messy in that the 
process is stopped without properly closing any open files, libraries, and so on. 


[=x 


File Edit Settings Help 





16987 0,0 0,7 6104 1942 7 S 12715 0:00 gnome-smproxy --sm-config 
17003 0,1 1.3 5888 3564 7 S 12:14 0:02 sawfish --sm-client-id 11 
170 0.1 3.8 3 9792 7 S 12:14 0:01 nautilus --sm-client-id 1 
170 0.0 2, 5504 7 S 12:14 0:01 panel --sm-client-id 117f 
170 0,0 iz 24 ? S 12314 0:00 magicdey --sm-client-id 1 
17024 0.0 0,6 314 ? S 12:14 0:00 fusr/bin/gconfd-1 10 
17026 0,0 0,4 3076 ? S 12:14 0:00 gnome-name-service 
17028 0.0 1,5 6? S 12:14 0:00 deskguide_applet --activa 

[root@localhost root]# kill 1023 

[root@localhost root]# kill -9 1023 

[root@localhost root] [ 

















FIGURE 15-29 An example of using the kill and kill -9 commands. 


The su (substitute user) Command 


su The su (substitute user) command is used to become another user on the system. This 
Command used to become command assumes that the user has a valid account on the system and the password 
another user on the system is known. The command structure is su [username]. An example of using this com- 


mand is provided in Figure 15-30. In this example, root is using the su command to 
log in as usera. This command is quite useful for administration. The administrator 
can be logged in as root to make some changes to the system that affect usera, such 
as checking ftp options or Web access. The administrator can then use the su com- 
mand to become usera and check to see if the changes worked. In fact, root user can 
use the su command and become any user on the system without knowing that user’s 
password. Any authorized user can use the su command as long as another valid user 
account and password are known. 
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[root@chile tmp]# su - usera 
[useraGchile usera]$ 





FIGURE 15-30 An example of using the su command to become another user. 


The mount Command 


The next command examined is mount, which is used to join an external file system mount 
such as that found on a CDROM or floppy, to the Linux file system to allow the files | Command used to access 
to be accessed. The external drives (for example, USB and CD-ROM) don’t mount external drives 
automatically unless the system has been previously configured to mount these dri- 
ves. This means that a directory has to be provided to the Linux file system for the 
external device to mount to. 
Linux lists files in the fstab file (/etc directory) that contain the arguments used fstab 
when the mount command for a specific drive is requested. Figure 15-31 shows a list- The file that contains the 


ing of the fstab file in the /etc directory. arguments sn ie 
mount command for a drive 


has been requested 
root@localhost/etc = 


File Edit Settings Help 


[root@localhost etc]# cat fstab 

LABEL=/ / defaults 

LABEL=/boot /boot defaults 

none /dev/pts gid=5, mocde=620 

none /proc defaults 

none /dev/shm defaults 

/dev/hdabd swap defaults 00 
/dey/cdrom /media/cdrom noauto, owner ,kudzu,ro 0 
0 


/dev/hdd4 /media/zip100.0 noauto,owner,kudzu 0 0 
/dev/fd0 /media/floppy noauto, owner, kudzu 0 0 
[root@localhost etc]# 





FIGURE 15-31 Listing of contents for the fstab file. 


This is a text file, and each line refers to a file system. The first field refers to / 
(the root file system). The second field is the mount location (/). In this case / will 
mount under / The third field is for the file system type. The entry ext3 refers to the 
Linux files system. This field will change depending on the mount. For example, a 
Windows file might be listed as MSDOS. The fourth field instructs Linux to use the 
default settings for file system. The last two fields show a / 7. The first / is the in- 
struction to check the integrity of the file system at boot (1 = on 0 = off). The last field 
refers to the Linux backup utilities (1 = backup, 0 = don’t back up) (a man on fstab 
or mount will provide more details about this field). 

This file is created when the Linux system is installed and is used if a new hard 
drive is added to the system. The file for the CD-ROM is shown in Figure 15-31. The 
first field is /dev/cdrom. The second field, /media/cdrom, is the mount point. (Note: 
The mount point has changed from /mnt/ for older releases of Linux to /media/.) 
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When a CD is placed in the CD-ROM, Linux mounts the CD and the files on the CD 
will be available in the /media/cdrom directory. The third field is the file system type. 
The field shows that this is an ISO9660 disc, the common file format for a CD-ROM. 
The fourth field indicates noauto indicating that this drive is not to be automatically 
mounted. The fifth field also indicates that the owner has privileges. This means that 
if a regular user places a CD in the drive, the owner will inherit the CDROM files. 
The entry kudzu is a utility that Linux uses to detect new hardware on the machine. 
The fifth field indicates this is a read only (ro) device. The last two fields show 0 0, 
which means don’t check the file system at boot time and don’t back it up. Another 
line in the fstab file is for the ZIP drive. The first field of this listing shows /dev/hdd4. 
This is for the ZIP drive. This drive will mount in the directory /mediat/zip 100.0. The 
next field shows auto, indicating the Linux system will try to automatically detect 
what type of file system is being mounted. Most of the time this is a Windows-based 
file system. The rest of the field parameters are the same as for the CD-ROM except 
there isn’t a ro declaration. Leaving off the ro declaration allows the contents of the 
ZIP files to be changed. 

The mount command enables a drive, file, and so on, to be mounted (refer to 
the man page for the mount options). There are two ways to mount a drive. In this 
case, the command will be issued to mount the computer’s CD-ROM. 

Newly mounted files will overlay existing files in the mount directory. How- 
ever, this is a virtual mount. No files are actually being written onto the mount file di- 
rectory. The command df -kh will display the devices mounted on the system. The df 
command provides a breakdown of the file systems that have been mounted on the 
operating system. The -kh extensions instructs the command to display the listing in 
k—kilobytes and h—human readable form. An example of using this command is 
provided in Figure 15-32. 
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[root@bob “]# df -kh 

Filesystem Size Used Avail Use% Mounted on 
/dev/sda3 336 2.46 31G 8% / 
/dev/sda2 39G 34G 2,66 94% /home 
/dev/sdal 99M 12M 83M 13% /boot 
tmpfs 506M 24K 506M 12% /dev/shm 
[root@bob “]# mount /dev/sdb1 /media/usb/ 

[root@bob ~“]# df -kh 

Filesystem i Used Avail Use% Mounted on 
/dev/sda3 2.46 31G 8% / 
/dev/sda2 34G 2,66 94% /home 
/dev/sdal 12M 83M 13% /boot 
tmpfs 24K SOBM 12% /dev/shm 
/dev/sdb1 48 346M 138M 72% /media/usb 
[root@bob “]# umount /media/usb/ 

[root@bob “]# df -kh 

Filesystem Size Used Avail Use% Mounted on 
/dev/sda3 33G 2.46 316 8% / 
/dev/sda2 39G 346 2,66 94% /home 
/dev/sdal 99M 12M 83M 13% /boot 

506M 24K 506M 12% /dev/shm 





tmpfs 
[root@bob “J# J 





FIGURE 15-32 An example of using the mount and umount commands to mount and 
umount a USB drive. 


The command mount /dev/sdbI media/usb is next used to mount the USB 
drive. Notice that the USB drive is called sdb1. The df -kh command can be used to 
verify the drive has been mounted. The listing now shows that the USB drive has been 
mounted. 
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It is important to understand that a drive must be unmounted before the media umount 
can be removed. The USB drive can be unmounted by using the command umount Command used to unmount a 
/media/usb as shown in Figure 15-32. It is important to note that you cannot unmount drive 
a device that has open files or directories. Entering the df -kh command now shows 
that the USB drive is no longer mounted. At this point, the USB drive can be removed. 


The shutdown Command 


The shutdown command is used to shut the Linux system down gracefully. This Shutdown -h now 
means that all open files and libraries are closed before the system turns off. The com- Command used to gracefully 
mand in Linux to gracefully shut the system down is shutdown -h now. This com- SauEce nema 

mand shuts down the operating system effective immediately. An example of using 

this command is provided in Figure 15-33. 
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[root@localhost root] shutdown -h now 








FIGURE 15-33 An example of using the shutdown -h now command. 


Linux Tips 


Many of the tasks performed by the network or system administrator require repeated Up Arrow 
used of the same commands or require that lengthy file names be entered. This sec- Used to display the 
tion presents some shortcuts available in Linux that help speed up the administrator’s Previously entered 
job. The first shortcut examined is the up arrow. The up arrow can be used to display commands stored in the 
. ee Linux history buffer 

the previous command entered on the command line in Linux. Pressing the up arrow 
again displays the next previous command. This is a very useful way to recall the his- hi story 
tory of commands entered on the command line. When you find the command that Command that displays the 
you need, simply press Enter to execute the command. Repeatedly pressing the up commands entered on the 
arrow will allow you to find a command previously executed. The History command command line in Linux 
can be used to display the commands stored in the Linux system buffer. The history 
buffer can store thousands of entered commands. (Note: The history buffer can also 
be used to determine if someone has been using your computer. Simply entering the 
history command will display all commands executed on the system. You will be able 
to identify the commands that you did not execute.) 

Another shortcut is the Tab key. This can be used to complete entries on the 
command line. For example, cd ho[tab] displays cd home. Linux searches for options 
that begin with ho to complete the entry. This is very useful when long or complicated 
entries are used. In the case where there are multiple entries that satisfy the entry, the 
Tab key can be used to step through the options. Entering f [tab] will generate multi- 
ple possibilities. Pressing the Tab key will cycle you through each option. Pressing 
the Tab key twice will display all available Linux commands. 

A useful program that comes with most Linux distributions is Konqueror, a Konqueror 
windows type file manager. To start the fedora-Konqueror browser, click the Kon- 4 windows type file manager 
queror icon as shown in Figure 15-34 (a). This opens the Konqueror screen shownin fOr Linux 
Figure 15-34 (b). Files can be opened and/or moved from this screen. 
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FIGURE 15-34 The (a) location of the Konqueror icon and (b) an example of the 
Konqueror screen. 


15-5 ADDING APPLICATIONS TO LINUX 


The objective of this section is to demonstrate the use of the Red Hat Package Man- 
ager (RPM) to install and uninstall applications and to query the system’s database. 
RPM uses a database to keep track of the software installed on the system. This data- 
base is updated anytime new software is installed or software is removed. RPM keeps 
track of the name of the application, the version installed, and any associated files. 
The term RPM describes the entire package application and management system used 
in Red Hat Linux. It is also the command to start the package manager: you obtain 
the manual listing for RPM by entering the command man rpm. The text shown in 
Figure 15-35 will be displayed. The man page shows that there are many options for 
the command. Although RPM is a Red Hat program, it has been adopted by many 
other Linux distributions as an easy and efficient way to manage applications. 


Telnet The first example of using RPM is a query all. When entered, the command 
Terminal emulation rpm -qa displays all of the applications installed on the system. The rpm -qa com- 
application for TCP/IP mand is often used to search for an application on the Linux system. In this example, 
networks the command will be used to search for telnet. This can be done by piping (pipe) the 


results of the rpm -qa to the grep command, as shown in Figure 15-36. The command 
for doing this is rpm -qa | grep telnet. In this case, telnet (a terminal emulation ap- 
plication for TCP/IP networks) is on the system, and in fact there is a telnet-server- 
0.17-20 and a telnet-client-0. 17-20. 
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RPM (3) Red Hat Linux RPM (3) 





rom - RPM Package Manager 


SYNOPSIS 
QUERYING AND VERIFYING 
rpa {-q|--query} aeania] [query-options] 


rpa le ii E [--nodeps] [--nofiles] 


[--no —noscripts 


rpa {-K|--checksig} [--nogpg] [--nopgp] [--nomd5] PACK- 
AGE FILE p.. 


INSTALLING, UPGRADING, AND REMOVING PACKAGES: 
rpa {- -i|--instal1} [install-options] PACKAGE FILE .., 


rpa {-U]--upgrade} [install-options] PACKAGE FILE ... 
rpa {-F|--freshen} [install-options] PACKAGE FILE ... 
rpa {-el--erase} [--allmwatches] [--nodeps] [--noscripts] 





FIGURE 15-35 The man page for RPM. 


[root@localhost lib]# rom -ga | grep telnet 
telnet-server-O,17-20 
telnet-0.17-20 





FIGURE 15-36 Using the rpm -qa | grep telnet command to search for files in the Linux 
system. 


The grep command is similar to the Windows search or find command. Grep grep 
is used to search for strings in a text file or a filename. In the previous example, grep Command used to search for 
was used to search for telnet. Two filenames were returned. The grep command can _ Strings in a text file 
also be used to return occurrences of a string within a file. All sentences with the pipe 
string in them will be displayed. The pipe command (I) is used to take the output of Used to take the output of 
one command and redirect it as an input to another command. In the example shown one command and redirect it 
in Figure 15-36, the output of the rpm command was redirected to the input of the as an input to another 
grep command. The output displayed came from the grep command. command 

Another useful tool to find out where a file came from is the command rpm -qf 
[filename] (q is for query, fis for file). This command searches the system’s rpm data- 
base and returns the name of the file that matches the query. An example of using this 
command is shown in Figure 15-37. 


rpm -qf 

Searches the rpm database 
and returns the name of the 
file that matches the query 


File Edit Settings Help 


[root@localhost lib]# rom -gf libkmedia?_idl.so 
0-4 


arts-1,0, 
[root@localhost lib]# 





FIGURE 15-37 An example of using the rpm -qf [filename] command. 
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The command rpm -qf libkmedia2_idl.so was entered, and the name arts- 
1.0.0-4 was returned. This indicates that the file /ibkmedia2_idl.so belongs to the 
arts-1.0.0-4 package. The command rpm -qf requires that a directory path be speci- 
fied for file searches outside the current directory. The next section demonstrates how 
to uninstall a package from the database. Uninstalling removes all files associated 
with that package. A prompt is displayed if a file is being removed that is also being 
used by another application. For example, assume that the telnet-server application is 
to be removed. It was shown in Figure 15-36 that the command rpm -qa | grep telnet 
command is used to search for telnet. 

Every instance of telnet in the database is listed. In this case, the name telnet- 
server-0.17.20 and telnet-0. 17-20 (client) are listed. 


rpm -e The command for uninstalling the telnet applications is rpm -e [filename]. An 
Command for uninstalling example is shown uninstalling both the telnet-server and telnet-client applications in 
the applications Figure 15-38. The telnet-server application is uninstalled using the command rpm -e 


telnet-server-0.17.20. The telnet-client application is removed using the command 
rpm -e telnet-0.17.20. There isn’t a prompt that notifies the user that the application 
has been uninstalled, but the rpm -qa | grep telnet command can be used to check if 
the application is still in the database. Also rpm notifies the user if a configuration file 
is going to be uninstalled, as shown in Figure 15-38. It is difficult (time-consuming) 
to reconfigure certain applications, so the Red Hat Packet Manager will save the con- 
figuration file to another file name. This is shown in Figure 15-38 at the warning 
prompt. The warning message alerts the users that the xinetd.d configuration file is 
being saved as telnet.rpmsave. This allows the user to retain a copy of the configura- 
tion file for future use. 


araia 
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[root@localhost lib]# rpm -e telnet-server-0,17-20 
warning: fetc/xinetd.d/telnet saved as /etc/xinetd.d/telnet.romsave 
[root@localhost lib]# rom -e telnet-0,17-20 


[root@localhost lib]# rom -qa | grep telnet 
[root@localhost lib]# {J 











FIGURE 15-38 The steps for uninstalling the telnet-server and telnet-client applications 
and verifying that the applications are no longer in the database. 


rpm -i The next step demonstrates how to install a Red Hat application (called RPMS) 
Command for installing an from the distribution CD-ROM. The packages are found in the RedHat/RPMS direc- 
application in Linux tory on the distribution CD-ROM. All Red Hat CDs will contain the same file direc- 


tory but the contents of the directory vary for each distribution. The command Is tel” 
is used to display all files that contain the tel letters in the filename. This is shown in 
Figure 15-39. The command returns the filename telnet-0. 1 7-23.i1386.rpm. This is the 
telnet-client application, which allows this computer to establish a connection with 
another computer on the network A telnet-server application can also be installed on 
this machine. This would allow other computers to establish a network connection 
(telnet) to this machine. The command structure for installing an application is rpm 
-i [application]. Normally the command rpm -ihv would be used so that the package 
is verified and a hash indicator is displayed as the installation progresses. The telnet 
package can be installed using the command rpm -i telnet-0.17-23.i386.rpm. This in- 
stalls all of the telnet-client files onto the Linux operating system. This includes any 
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library, documentation (man pages), and any necessary links for the application to be 
executed on the system. 
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[root@localhost RPMS]# pud 

/ont/cdrom/RedHat/RPMS 

[root@localhost RPMS]# ls telx 
telnet-0.17-23.i1386.rpr 

[root@localhost RPMS]# rom -i telnet-0,17-235,i386.rpm 
[root@localhost RPMS]# rpm -qa | grep telnet 
telnet-0,17-23 

[root@localhost RPMS] # 








FIGURE 15-39 An example of locating and installing an RPM from the Red Hat 
distribution CD-ROM. 


The steps for installing the telnet-server are the same as the telnet-client except 
the package name changes. The command is modified to rpm -i telnet-server- 
0.17.20.rpm to install the telnet-server. Any server on Linux will have a script (pro- 
gram) that starts and stops it. This requires that the script must be modified to start 
the program. In Red Hat Linux, the control for starting and stopping services all re- 
side in the same directory (/etc/rc.d/xinetd.d). This directory contains most of the 
scripts for the Linux server applications. The Is command is used to display the 
servers installed. Scripts for every server application are found in the xinetd.d direc- 
tory. The scripts are regular text files that can be edited to start the service. A text ed- 
itor is used to modify the script. In this case, the text editor vi was used. The command 
vi telnet opens the telnet script for editing. The script is shown in Figure 15-40. At the 
very bottom of the script is disable. The setting for this should say no, as shown. Set- 
ting this setting to no and saving the edited script will enable the telnet-server appli- 
cation to run. (Note: The telnet-server application will only run when a remote 
connection is trying to be made to the computer.) 


flags = REUSE 

socket_type = stream 

wait = no 

user = root 

server = /usr/sbin/in,telnetd 
log_on_failure += USERID 

disable = no 


"telnet" 14L, 304C 





FIGURE 15-40 The script for the telnet-server application. 


An expected task performed by network and system administrators is to add 
Web service to the network. This section presents the steps for adding the Apache 
Web service to the Linux operating system. Apache is the standard Web service for 
Linux, similar to MIIS for Microsoft Windows. 
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httpd The command for installing the Apache Web service is rpm -i apache-1.3.27- 

The script that starts the 1.7.2.i386.rpm, as shown in Figure 15-41. On occasion, a prompt will be displayed 

Web server that a certain application is missing. In this case, the missing software packages can 
be found either with the Red Hat distribution disks or on the Internet. Once the soft- 
ware is installed, change directories to /etc/rc.d/init.d. This directory contains the 
script (httpd) that starts the Web server. The command is ./httpd start, as shown in 
Figure 15-42. This file was installed when the rpm was issued to install Apache. The 
./ in front of the httpd is used for security reasons. This instructs the software to only 
look for this command in the current working directory (/etc/rc.d/init.d) first. This 
prevents the use of the command from another location. Another program of the same 
name could have been placed on the system and could contain malicious code. The 
screen displays the statement Starting httpd: [ OK ], which indicates that the service 
was successfully started. 
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[root@localhost zip100.0]# rpm -i apache-1.3.27-1.7.2.1386.rpm 
[root@localhost zip100,0]# [ 








FIGURE 15-41 The steps for installing the Apache Web service. 
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[root@localhost zip100.0]# rom -i apache-1.3,27-1.7.2,.i386.rpm 
[root@localhost zip100.0]# cd /etc/rc.d/init.d/ 
[root@localhost init.d]# ls 

functi iptables 





le 


cups ipchains kudzu 
[root@localhost init.d]# pud 
fetc/rc.d/init.d 

[root@localhost init.d]# ./httpd start 
Starting httpd: 

[root@localhost init.d]# JJ 











FIGURE 15-42 The steps for installing and starting the Apache Web service. 


Mozilla Linux uses Mozilla for an Internet web browser. The command for starting 
The Linux Web browser Mozilla is mozilla. The URL can be changed to the Linux machine simply by enter- 
ing http://localhost/. Remember, the default name for the Linux machine 1s localhost. 
If the Web service is working properly, the test page shown in Figure 15-43 should 
be displayed. This test page provides the administrator with information about the 
configuration files. Linux provides this as a default page for setting the Web service. 
There are two directories and files that are important relative to the Apache in- 
stallation. The first is the index.html file, located in the /var/www/himl directory, 
shown in Figure 15-44. This is the root directory for the Web service. The test page 
actually resides in index.html. Users can build their web pages off this file and linked 
files. 
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Test Page for the Apache Web Server on Red Hat Linux - Mozilla {Build ID: 200204061 3} 


File Edit View Search Go Bookmarks Tasks Help 


= = a, : a u [Æ http:ocalhos’ =| g2 Search| SA = 


@yHome Wf Bookmarks Red Hat Network G4 Support gá Shop G4Products gá Training 











Test Page 


This page is used to test the proper operation of the Apache Web server after it has been 
installed. If you can read this page, it means that the Apache Web server installed at this 
site is working properly, 








If you are the administrator of this website: 


You may now add content to this directory, and replace this page, Note that until you do 
so, people visiting your website will see this page, and not your content. 


If you have upgraded from Red Hat Linux 6.2 and earlier, then you are seeing this page 
because the default DocumentRoot set in /etc /httpd/conf /httpd. conf has changed. Any 
subdirectories which existed under “home /httpd should now be moved to /var Ain. 
Alternatively, the contents of /var ‘wr can be moved to “home /httpd, and the 
configuration file can be undated accordingly, 

i Eb \@ fal @& | Document: Done (0.299 secs) | 
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[root@localhost html] pwd 

/yar/wuw/hAtml 

[root@localhost html]# ls -1 

total 8 

-ry-r--pr-- 1 root root 2890 Oct 23 13:55 index.html 
-Pu-P--p-- 1 root root 1154 Oct 23 13:53 poweredby.png 
[root@localhost htmlj# QJ 





FIGURE 15-44 The location of the index.html file. 


The second important directory and file is the httpd.conf file located in the httpd.conf 
/etc/httpd/conf directory. This is shown in Figure 15-45. This is the configuration file The configuration file for the 
for the Apache Web server that is read every time the service is started. The httpd.conf Apache Web server 
file is a text file and can be edited; however, the Apache server must be restarted for 
the changes to take effect, using the command ./httpd restart, as shown in Figure 
15-46. Notice that the command is issued from the /etc/rc.d/init.d directory, and the 
command line displays the prompts: 


Stopping httpd: [ OK ] Starting httpd: [ OK ] 
indicating the Apache Web server has stopped and restarted. The Apache web 


server can be stopped using the command ./httpd stop. This provides an orderly 
(scripted) shutdown. The following output will be displayed on the terminal screen: 


Stopping httpd: [ OK ] 
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ethoO, ethi, eth2,... 
The way Linux identifies the 
Ethernet interface cards 


ifconfig 

Reports all of the network 
devices recognized and 
running on the system, 
listing all of the interfaces 
and the configuration for 
each 


Net Mask 
Linux name for the subnet 
mask 


lo 
The Linux symbol 
representing the loopback 





EIEE 
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[root@localhost conf ]# pwd 
fetc/httpd/conf 
[root@localhost conf]# ls -1 
total 80 

-rw-r--r-- 1 root root 
m a an E 1 root 
efie 1 root 
=M= 1 root 
[root@localhost conf ]# 





285 Oct 23 13:53 access,conf 
51308 Oct 23 13:53 httpd.conf 
12965 Oct 23 13:54 magic 


297 Oct 23 13:53 srm.conf 


[root@localhost init.d]# pwd 
fetc/rc.d/init.d 
[root@localhost init.d]# ls 


le 


cups ipchains kudzu nscd 
[root@localhost init.d]# ./httpd restart 
Stopping httpd: 

Starting httpd: 

[root@localhost init.d]# 





FIGURE 15-46 The steps for restarting the Apache server so that changes made to the 
httpd.conf configuration file can take effect. 


15-6 LINUX NETWORKING 


The objective of this section is to demonstrate how to configure a Linux machine to 
run on the network. This section assumes that the Linux machine already has a net- 
work interface card (NIC) installed. Red Hat Linux 8.0 is very good at detecting all 
major brands of network interface cards and also contains drivers for the NICs. Linux 
will automatically detect the card and may prompt you for the IP address, net mask, 
and gateway address during the installation of the operating system. Hardware in- 
stalled after the initial system installation will still be detected by the autodetect fea- 
ture running in Linux. 

Ethernet cards in Linux are identified as eth0, eth1, eth2, and so on. The com- 
mand ifconfig is used to report all of the network devices recognized and running on 
the system. This command lists all of the interfaces and the configurations for each 
interface. The configurations include the IP address, the net mask (subnet mask), the 
broadcast address, and the gateway. The ifconfig command also reports back on the 
status of the loopback (lo), as shown in Figure 15-47. 

The ifconfig command can also be used in Linux to change the IP address con- 
figuration for the network interface. The following examples will demonstrate con- 
figuring ethO, the default interface device on most Linux machines. The command 
ifconfig displayed the ethO and lo as shown in Figure 15-47. The IP address for the 
machine is currently 192.168.12.1. This example demonstrates how to change the IP 
address of the ethO interface. The command ifconfig eth0 192.168.20.5 is entered on 
the command line, and the ifconfig command is used to display the interface settings 
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(shown in Figure 15-48). This applies the IP address to the network interface. The de- 
fault values for the broadcast and subnet masks are used if no value is specified. In 
this case, the Bcast (broadcast) address is automatically updated to 192.168.20.255, 
the broadcast address for this class of network. The Mask (subnet mask) entry is au- 
tomatically updated to the class C subnet mask 255.255.255.0. 


(= |5|x! 
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[root@localhost root]# ifconfig 
ethd Link encapzEthernet Hljaddr 00:60:97:B1:7A:5B 
inet addr:192,168,12,1 Bcast:192.168,12.255 Mask:255,255,2755 0 
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 
RX packets?0 errors:0 dropped:0 overruns:0 frame:0 
TX packets?? errors:0 dropped:0 overruns:0 carrier?1 
collisions:0 txqueuelen:100 
RX bytes:0 (0.0 b) TX butes:120 (120.0 b) 
Interrupt:10 Base address :Oxdc80 





Link encaptLocal Loopback 

inet addr:127,0,0,1 Mask:255,0,0,0 

UP LOOPBACK RUNNING MTU:16436 Metric?1 

RX packets?424 errors:0 dropped:0 overruns:0 framet0 
TX packets?424 errors:0 dropped:0 overruns:0 carrier:0 
collisions:0 txqueuelen:0 

RX bytes?21508 (21.0 Kb) TX bytes:21508 (21.0 Kb) 


[root@localhost root ]# 





FIGURE 15-47 An example of using the ifconfig command to display the network 
interfaces and their configuration. 
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[root@localhost rootj# ifconfig ethO 192,168,20,5 a| 
[root@localhost root]# ifconfig 
ethod Link encap?Ethernet Hlladdr 00:60:97:B1:7A75B 

inet addr:192.168,20.5 Bcast:192,168,20,255 Mask:255,255,255 0 

UP BROADCAST RUNNING MULTICAST MTU:1500 Metric?1 

RX packets:0 errors?0 dropped:0 overruns:0 frame:0 

TX packets:?2 errors:0 dropped:0 overruns:0 carriert1 

collisions:0 txqueuelen:100 

RK bytes:0 (0,0 bì TX bytes:120 (120,0 b) 

Interrupt:10 Base address :Oxdc80 


Link encaptLocal Loopback 

inet addr:127,0,0,1 Mask?255,0,0,0 

UP LOOPBACK RUNNING MTU:16436 Metric:1 

RX packets?324 errors:0 dropped:0 overruns:0 frame:0 
TA packets:324 errors:0 dropped:0 overruns:0 carrier:0 
collisions:0 txqueuelen:0 

RX bytes?21508 (21.0 Kb) TX bytes:21508 (21.0 Kb) 


[root@localhost root]# ifconfig ethO 192,168,20,5 netmask 255,255.0,0 
[root@localhost root]# [ 





FIGURE 15-48 Using the ifconfig command to change the network interface IP address. 


A different subnet mask can be applied to the network interface by appending 
the subnet mask value to the ifconfig command. An example of this is shown at the 
bottom of Figure 15-48 using the command ifconfig Eth0 192.168.20.5 netmask 
255.255.0.0. 

Another set of commands used for controlling the network interfaces are ifdown, ifup 
ifdown [interface] and ifup [interface]. These commands enable the administrator to | Commands used to shut 
shut down and bring back up the network interface. This is useful when a machine is down and bring back up the 
being subjected to a network attack and the network connection needs to be shut down network interface 
quickly. The ifdown eth0 command brings down the EthernetO interface. The ifcon- 
fig command no longer displays the ethO interface. The interface can be brought back 
online by issuing the ifup ethO command. The ifconfig command now shows that the 
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eth0 interface is available. The steps for shutting down and bringing up a network in- 
terface are shown in Figure 15-49. 


IEEE 
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[root@localhost root]# ifdown ethd 

[root@localhost root]# ifconfig 

lo Link encaptLocal Loopback 
inet addr:127,0,0,1 Mask:255,0,.0,0 
UP LOOPBACK RUNNING MTU:16436 Metric:1 
RX packets?424 errors:0 dropped:0 overruns:0 framet0 
TX packets:324 errors:0 dropped:0 overruns:0 carrier +0 
collisions:0 txqueuelen:0 
RX bytes!21508 (21.0 Kb) TX bytes:21508 (21,0 Kb) 





[root@localhost root]# ifup ethd 
[root@localhost root]# ifconfig 
ethd Link encap:Ethernet Hlladdr 00:60:973B1:7A:5B 
inet addr:192,168.12.1 Bcast:192,168,12,255 Mask:255,255,255,0 
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 
RX packets:0 err 0 dropped:0 overruns:0 frame:0 
TX packets?5 errors?0 dropped:0 overruns:0 carrier?3 
collisions:0 txqueuelen:100 
RX bytes:0 (0.0 b) TX butes:300 (300.0 b) 
Interrupt:10 Base address :0xdc80 


Link encaptLocal Loopback 

inet addr:127,0,0,1 Mask:255,0,0,0 

UP LOOPBACK RUNNING MTU:16436 Metric:1 

RX packets:324 errors:0 dropped:0 overruns:0 frame:0 
TX packets?424 errors?0 dropped:0 overruns!0 carrier:0 
collisions:0 txqueuelen:0 

RK bytes:21508 (21.0 Kb) TX bytes:21508 (21,0 Kb) 


[root@localhost root ]# 








FIGURE 15-49 Examples of using the ifdown and ifup commands. 


network stop In some cases it is necessary to shut down all network interfaces. The command 
Shuts down all network for doing this is network stop. Linux will echo a response of the interfaces that are 
interfaces shutting down. Entering the ifconfig command will now display that no network in- 


terfaces are active. An example of using stopping the network on Linux is shown in 
Figure 15-50 (a). The command for starting the network is network start, shown in 
Figure 15-50 (b). Linux prompts that it is bringing up interfaces. Issuing the ifconfig 


network start 
Brings up the network 


interfaces 

command now displays that ethO and lo are both available. 
route add default gw The next step is to provide a gateway address for the Linux network interface. 
Command used to specify the This is accomplished using the route add default gw [ip address] command. Enter- 
gateway address ing the route command without any arguments displays the different routes. This is 


shown in Figure 15-51 (a). The display shows that the default gateway is 
192.168.12.254. This can be changed to 192.168.12.1 by issuing the command route 
add default gw 192.168.12.1, as shown in Figure 15-51 (b). Linux will prompt you 
if an unreachable gateway address has been specified, as shown in Figure 15-51 (c). 
Linux will display this message if a gateway address outside the network address is 
specified. For example, the entry route add default gw 192.168.20.5 displays that the 
address is unreachable. This is because 192.168.20.0 is a different class C network. 
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[root@localhost root] /etc/rc.d/init.d/netuork stop 
Shutting down interface eth0: 

Shutting down loopback interface: 

[root@localhost root]# ifconfig 


RR 
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[root@localhost root]# fetc/rc.d/init.d/network start 

Setting network parameters? 

Bringing up loopback interface: 

Bringing up interface ethO: “[[A 

[root@localhost root]# ifconfig 

ethd Link encapzEthernet Hlladdr 00:60:97:B1:7A:5B 
inet addr:192,168.12.1 Bcast:192.168.12.255 Mask:255,255,255,.0 
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1 
RX packets?0 errors:0 dropped:0 overruns:0 frame:0 
TX packets?8 errors:0 dropped:0 overruns:0 carrier?5 
collisions?0 txqueuelen:100 
RX bytes:0 (0.0 bì) TX bytes:480 (480.0 b) 
Interrupt:10 Base address :0xdcé0 


Link encap?Local Loopback 

inet addr:127,0,0,1 Mask?255,0,0,0 

UP LOOPBACK RUNNING MTU?16436 Metric:1 

RX packets?428 errors:0 dropped:0 overruns:0 frame:0 
TX packets?328 errors:0 dropped:0 overruns:0 carrier:0 
collisions:0 txqueuelen:0 

RX bytes:21848 (21,3 Kb) TX bytes:21848 (21.3 Kb) 





[root@localhost root ]# 





(b) 


FIGURE 15-50 (a) Using the command network stop for shutting down all network 
interfaces; (b) using the command network start for bringing up all network interfaces. 
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[root@localhost root]# route 

Kernel IP routing table 

Destination Gateway Genmask Flags Metric Ref 
192,168,120 * 205,255,255,0 U 0 0 
127 ,0,0,0 * 255 ,,0,0,0 U 0 0 
default 192.168.127.254 0.0.0.0 UG 0 0 


(b) 
[root@localhost root] route add default gw 192,168,12,1 


[root@localhost root]# route 
Kernel IP routing table 
Destination Gateway Genmask Flags Metric Ref 
192.168 .12.0 * 255,255,255,0 U 0 0 

x 255 ,0,0,0 U 0 0 
default 192 ,168,12,1 0,0,0,0 UG 0 0 


127 .0,0,0 


íc) 
[root@localhost root]# route add default gw 192,168,20,5 
SIOCADDRT: Network is unreachable 
[root@localhost root ]# 





FIGURE 15-51 (a) Using the route command to display the network routes available on 
the machine; (b) changing the network’s default gateway address; (c) the Linux prompt for 
an unreachable gateway address. 
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The Linux network programs take their cue from a set of scripts in the 
etc/sysconfig/network-scripts directory. These scripts contain the values assigned to 
all network devices in the Linux operating system. This example looks at the contents 
of the ifcfg-eth0O script, which is the file associated with the EthernetO network inter- 
face. The cat command is used to display the file, as shown in Figure 15-52. These 
contents identify how ethO will be configured when booting or when the network is 
started. The root user can modify this file as needed. 


(=|/5)/x!) 


File Edit Settings Help 





[root@localhost network-scripts]# ls 
ifcfg-ethd ifdown-isdn ifup-aliases 

ifcfg-lo ifdown-post ifup-cipch ifup-plusb = ifup-wireless 
ifdown ifdown-ppp =: ifup-ippp ifup-post init.ipv6-global 
ifdown-cipcb ifdown-sit ifup-ipy6 ifup-ppp network-funct ions 
ifdown-ippp ifdown-sl ifup-ipx ifup-routes netuwork-functions-ip: 
ifdown-ipyv6 ifup ifup-isdn ifup-sit 

[root@localhost network-scripts]# pwd 

fetc/susconfig/netuork-scripts 

[root@localhost network-scripts]# cat ifcfg-ethd 

DEVICE='etho' 

ONBOOT='yes ' 

BOOTPROTO= ‘none ' 

IPADDR='192 ,168,12,1' 

NETMASK= '255 ,255 ,255 ,0' 

GATEWAY='192 ,168 ,12,254' 

TYPE='Ethernet ' 

USERCTL='na' 

NETWORK='192,168,12,0' 

BROADCAST='192, 168,12 ,255' 

[root@localhost network-scripts]# 











FIGURE 15-52 The steps for examining the contents of the ifcfg-ethO script. 


Installing SSH 


openssh This section demonstrates how to install SSH (the secure shell), which is similar to 
The secure shell application telnet except SSH encrypts the data traffic between the two hosts. SSH is a better tool 
for Linux for remote administration or remote work. The openssh applications, openssh-clients 


and openssh-server, are provided with the Red Hat distribution of Linux. Installing 
the openssh-client application requires that four RPMS be installed. These applica- 
tions are found in the rpm directory as shown in Figure 15-53. (Please note: The files 
names change with each distribution, but steps for locating and installing the files are 
the same.) 


id a (PIF 


File Edit Settings Help 


[root@localhost RPMS]# ls openssh* a| 
openssh-3.4p1-2,i386.rpa openssh-clients-3 .4p1-? .i386.rpr 
—askpass-3.4p1-2.1386.rpr openssh-ser ver-3.4p1-? .1386.rpr 


—askpass-gnore-3.4p1-2, i386.rpr 
[root@localhost RPMS]# rom -i openssh-clients-3,4p1-2,i386.rpm 
[root@localhost RPMS]# rpm -i openssh-3.4p1-2.1386.rpm 
[root@localhost RPMS]# rom -i openssh- server -3,4p1-2,i386,rpm 
[root@localhost RPMS]# rpm -i openssh-askpass-3,4p1-2,.1386.rpm 
[root@localhost RPMS]# rpm -i openssh-askpass-gnome-3.491-2,1386 rpm 
[root@localhost RPMS]# rom -ga | grep openssh 
openssh-3 41-2 
openssh-clients-3,4)1-2 
openssh-askpass-gnome-3 ,4p1-2 
openssh-askpass-34 ,41-2 


FIGURE 15-53 The listing of the openshh rpms. 
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Five openssh’ files are listed in the rpm directory. The first four files are used 
in the client installation; the last file is used to install the openssh-server: 


e openssh client files 
openssh-clients-3.4pl-2.i386.rpm 
openssh-askpass-3.4pl-2.i386.rpm 
openssh-3.4pl-2.i386.rpm 

e openssh server file 
openssh-server-3.4pl-2.i1386.rpm 


The openssh client is installed on the Linux machine by entering the command 
rpm -t [filename]. This is repeated for each of the three client files, as shown in Fig- 
ure 15-53. Once the files are installed, the database can be queried using the com- 
mand rpm -qa | grep openssh. The openssh files installed are then listed as shown in 
Figure 15-53. 

The command ssh [destination] can be used to establish an SSH connection. 
This assumes that the destination has an SSH server running. In this case, the desti- 
nation is user@machine.edu. An example is shown in Figure 15-54. 


i 
iL 
x 


root@localhost/mnt/cdrom/RedHat/RPMS- p ES 
File Edit Settings Help 


[root@localhost RPMS]# ssh user@machinename ,edu 








FIGURE 15-54 Establishing an SSH connection. 


The installation of the SSH server is very similar to the installation of the SSH 
client. The command rpm -i openssh-server-3.4p1-2.i386.rpm is used to install the 
openssh-server. The installation can be verified in the same way that the installation 
was verified for the client. 


The ftp Client 


There are many ftp client applications for Linux. This section demonstrates the use ncftp 
of the ftp application called neftp. This application is popular with network adminis- An ftp application for Linux 
trators because of its ease with putting files on and getting files from the command 

line. The command used to start the application is ncftp [server-name]. An example 

is shown in Figure 15-55. An ftp server session with 192.168.12.2 is being requested. 

The screen prompts that a connection is being established, and then the prompt salsa 
Microsoft FTP service (Version 5.0) is displayed. (Note: salsa is our example Win- 

dows 2003 server machine.) The screen next prompts Logging in. . . | Anonymous 

user logged in. The anonymous login is listed because a user was not specified with 

the ncftp command. The command neftp -u [server-name] can be used to instruct the 

ftp server to prompt you for the user’s password. (See the man page for ncftp for more 
instructions.) The Linux box then replies Logged in to 192.168.12.2, indicating that 

a connection has been established. The prompt on the Linux machine now shows 

neftp /—. 
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File Edit Settings Help 


[root@chile root]# ncftp 192,168,12,2 
NcFIP 3.1.3 (Mar 27, 2002) by Mike Gleason (ncftpGncftp.com), 
Connecting to 197,168,12.2,.,, 

salsa Microsoft FTP Service (Version 5,0), 
Logging in... 

Anonymous user logged in, 

Logged in to 192,168,12,2, 

ncftp / > 





FIGURE 15-55 Using ncftp to start an application. 


The ftp Server 


wu-ftpd One of the most popular ftp servers is Washington University’s (wu-ftpd). The 
Washington University’s ftp wuftpd server package is found in the Fedora Core 8.0 Distribution disk #3 in the 
server /etc/xinetd.d directory. The files in this directory are shown in Figure 15-56. The d on 


dcman the end of wu-ftpd is a common way in Linux to indicate that this file is a daemon, 

E Ene Seniee or server. The command rpm -i wu-ftpd is used to install the ftp server. The next step 

package is to make the service available to the outside world by modifying the configuration 
file. This requires that the wu-ftpd configuration file located in the /etc/xinetd.d di- 
rectory be edited using a Linux text editor. A portion of the configuration file is shown 
in Figure 15-57. At the end of the file is the word disable. Next to this word is an op- 
tion for entering yes or no. Yes disables the server; no enables it. In this case, the con- 
figuration shows that the wu-ftpd server application is enabled (disable = no). 


File Edit Settings Help 


[root@chile RPMS]# cd redii d/ 

[root@chile xinetd.d]# ls 

chargen daytime-udp rsync sgi_fam telnet.rpmsave wu-ftpd 
chargen-uda echo servers telnet time 

daytime echo-udp services telnet.rpmnew time-udp 

[rootG@chile xinetd.d]# pud 

fetc/xinetd.d 

[root@chile xinetd.d]# vi wu-ftpd 

[root@chile xinetd ay chkconf ig Fea 

keytable ton 
atd sof toff 
off toff 
off soft 
toff toff 


‘off 
ton 
ton 
ton 


sys log 

gpm 
sendmail 
kudzu 
netfs 
network 
random 
raudeyices 





OO OJ OJ OJ OJ OJ OJ OF OJ ON OJ ON OJ ON 
++ ++ ++ ++ ++ ++ FF +t +t tt FF HH He OF OF 
LLRLRLRLRLRARALRAERARRARRARRARRARRARRARRA 
++ ++ FH FH HH FH HH FH HH HH HH HH HH FH HH 
aononanannnnnnnnnns 
++ ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ ++ OH Ot He 
O O O O O O O O O O O O a o o 
++ ++ FF +4 +4 ++ +4 ++ FH EF tt tt tt tt tt 


papa pa ee a a i ea a ajai 
++ ++ FH $F +H HF +H $F H H 

NNNUNN NNNNNNN NN NNNN NN 
$e Oo +3 +9 +9 OF Oe +9 OF +s a 


Oto 

0 

0: 
0: 
0 

0: 
0: 
0: 
0: 
0: 
0: 
0: 
0: 
0: 
0: 


anacron 


FIGURE 15-56 The location of the wu-ftpd package in Linux. 
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File Edit Settings Help 


[rootG@chile xinetd.d]# more wu-ftpd 

# default: on 

# description: The wu-ftpd FTP server serves FTP connections, It uses }, 
# normal, unencrypted usernames and passwords for authentication, 
service ftp 


socket_type = stream 


wait = no 

user = root 

server = fusr/sbin/in.ftpd 
server_args = -] -a 
log_on_success += DURATION 

nice = 10 

disable = no 


} 
[root@chile xinetd.d]# 





FIGURE 15-57 The wu-ftp configuration file. 


DNS Service on Linux 


DNS is used for name resolution (see Chapter 5). In Linux, the list of information for resolv.conf 

the DNS service is found in a file in the /etc directory called resolv.conf. This is Contains the list of DNS 
shown in Figure 15-58. This file contains the list of the IP addresses for the DNS servers for the Linux 
servers. The contents of an example resolv.conf file are listed in Figure 15-59. Two machine 

entries are shown for this file. The first is search localdomain, and the second entry 

is nameserver 192.168.12.1. This listing shows the search sequence for resolving 

names to an IP address. Multiple name services can appear in this list, but remember, 

this is a search order. Linux will not perform any name resolution if this file is empty. 


[root@localhost etc]# ls resoly.conf 
resoly,conf 
[root@localhost etc]# pwd 


etc 
[root@localhost etc]# [ 





FIGURE 15-58 The location of the DNS resolv.conf file in Linux. 


File Edit Settings Help 


search localdomain 





nameserver 197,168,12,1 


~ 





FIGURE 15-59 The contents of the example resolv.conf file. 


Changing the Hostname 


This section demonstrates how to change the hostname of a Linux machine. The name 
of the Linux machine is located in the /etc directory. The root user can be changed 
using the command hostname [name]. In this case the example is showing that the 
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Command used to display 
the boot processes for Linux, 
used to identify why certain 
processes failed 


598 Chapter 15 e 


hostname is being changed to chile-one as shown in Figure 15-60. You must log off 
and back on for the change to take place. 


File Edit Settings Help 


[rootêchile root]# hostname chile-one 
[rootêchile root]# JJ 








FIGURE 15-60 An example of using the hostname command to change the name of the 
Linux machine. 


15-7 TROUBLESHOOTING SYSTEM AND 
NETWORK PROBLEMS WITH LINUX 


Linux has many options available for troubleshooting hardware and software prob- 
lems. This section presents some of the options available to the administrator and the 
user. The following Linux troubleshooting commands are presented in this section: 


dmesg 
reboot 
last 

who 

w nmap 
chkconfig 
netstat -ap 


Troubleshooting Boot Processes 


The dmesg Command The first command examined is dmesg, used to display the 
boot process for Linux. This command is useful if a certain application fails to be rec- 
ognized or boot properly. This file will display errors that can be used to better un- 
derstand why a process failed. This command is available to any user on the system, 
but remember, only root will be able to fix the problems. This file can contain a large 
amount of text, so the command can be piped to more using the command dmesg | 
more as shown in Figure 15-61. This screen shows the text from the last Linux boot 
process. This provides information on the system devices detected, how memory is 
configured, hard drive information, and any errors coming from the software. 


Linux Networking 


an 


File Edit Settings Help 


[root@localhost root]# dmesg | more 

Linux version 2,4,18-3 (bhcompile@daffy.perf.redhat.com) (gcc version 2,96 20000 

741 (Red Hat Linux 7.3 2,.96-110)) #1 Thu Apr 18 07:37:53 EDT 2002 

BIOS-provided physical RAM map: 

BIOS-e820: 0000000000000000 - 00000000000a0000 (usable) 
BIOS-e820: 00000000000f0000 - 0000000000100000 (reserved) 
BIOS-e820: 0000000000100000 - 0000000010000000 (usable) 
BIOS-e820: 00000000ffe00000 - 0000000100000000 (reserved) 

On node 0 totalpages: 65536 

zone(0}: 4096 pages, 

zone(1}: 61440 pages, 

zone(2): 0 pages, 

Kernel command line: ro root=/dev/hda3 

Initializing CPU#0 

Detected 498,758 MHz processor, 

Console: colour YGA+ 80x25 

Calibrating delay loop... 996,14 BogoMIPS 

Memory: 255508k/262144k available (1119k kernel code, 6252k reserved, 775k data, 
280k init, Ok highmem) 

Dentry cache hash table entries: 32768 (order: 6, 262144 bytes) 
Inode cache hash table entries: 16384 (order: 5, 131072 bytes) 
Mount-cache hash table entries: 4096 (order: 3, 32768 bytes) 
Buffer cache hash table entries: 16384 (order: 4, 65546 bytes) 





FIGURE 15-61 An example of using the dmesg command piped to more. 


The reboot Command A useful Linux command to use when the system is 
not operating correctly due to either hardware or software problems is reboot. This 
command gracefully shuts down the system so that it is properly configured on re- 
boot. If a Linux machine needs to be rebooted, use the reboot command; do not press 
the Reset button on the PC. The reboot command is shown in Figure 15-62. The best 
directory to look for troubleshooting information is the Wvar/log directory. A listing 
of the var/log directory is provided in Figure 15-63. Many of the files have a .1, .2, 
.3, and so on following the file name. For example: 


boot.log 
boot.log.1 


boot.log.2 
boot.log.3 


File Edit Settings Help 


[root@localhost root]# reboot 





FIGURE 15-62 Entering the reboot command. 


File Edit Settings Help 


[root@localhost log]# ls 

boot, log cups ksums 6 messages, ó secure,2  wtmp,1 

boot, log,1 dmesg lastlog messages .4 secure.3 xferlog 
.log,2 fax maillog rpmpkgs secure,4 xferlog,1 
.log,3 gda maillog,1 rpmpkes.1 spooler kFreeé6 .0, log 

kFrees6 .9, log 


-log.4 ksyms.0 maillog.2 rpmpkes,2 spooler .1 
ksyms,1 maillog.3 rpmpkes.3 spooler ,2 
ksyms,2 maillog.4 rpmpkes,4 spooler .3 
ksyms,3 messages scrollkeeper.log spooler .4 
ksyms,4 messages.,1 secure ybox 
cron.4 ksyms,5 messages.2 secure,1 wt mp 
[root@localhost log]# 





FIGURE 15-63 The listing of the /var/log directory. 


reboot 

Command used to gracefully 
shut down the Linux 
machine and reboot 
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These files are renamed at regular intervals (hence the .1, .2, .3, ... extensions) 
and are kept in storage. It is important to understand that these are rolling log files. 
The 1 becomes 2, pushing 2 to 3, 3 to 4, and so on. Eventually, the file is deleted and 
replaced. A summary of the useful troubleshooting files in the var/log directory fol- 
lows: 


boot.log—Keeps track of the boot processes. 


lastlog—Keeps track of user login; requires the use of the last command to 
display its contents. 


maillog—Keeps a log of mail activity. 


messages—Contains most of the system messages that report any software or 
hardware errors. This is an important troubleshooting file. 


secure—Keeps track of any users entering or exiting the system and keeps 
track of security violations such as unauthorized users attempting login. 


spooler—File for mail management. 


Listing Users on the System 


last The last Command The last command is extremely useful in security. This com- 
Command used to display mand accesses the login file and reports of logins to the Linux system. An example 
logins to the Linux system of using the command is provided in Figure 15-64. This command lists all users that 


have logged on to the system since the last reboot or for the past month. The login in- 
formation displayed includes the account name, day, date, and time. This command 
is useful if the administrator suspects that someone has gained unauthorized access 
to the Linux machine. The information displayed by the last command shows that 
there are two users on the system. The first listed is usera, who logged in from local- 
host on Feb. 11 at 12:48 and is still logged in. The other account, root, is currently 
logged in and has logged into and out of the system many times. 


O oo- 


File Edit Settings Help 


last 
localhost Tue Feb 11 12:48 still logged in 
:0 Tue Feb 11 12:47 - 12:48 (00:00) 
Tue Feb 11 12:46 sti logged in 
Tue Feb 11 12:46 - 12:46 (00:00 
Tue Feb 11 12:46 - 12:46 
i Tue Feb 11 12:33 still logged in 
30 Tue Feb 11 12:32 gone - no logout 
system boot 2,4,18-4 Tue Feb 11 12:31 (00:17) 
pts/0 30 Tue Feb 11 12:20 - doun 
j Thu Feb 6 12:58 - 12:58 (00:00) 
Thu Feb 
Thu Feb 





12:58 - 12:58 (00:00) 
12 13:17 (00:19) 
down (44+25:32) 
12:57 (00:39) 
13:15 (00:59) 


Thu Feb 


6 

6 
Thu Feb 6 12 

6 
Tue Feb 4 


258 
:57 
12:18 
12:15 
wtmp begins Tue Feb 4 12:15:26 2003 

[root@localhost log]# 





FIGURE 15-64 Using the last command to display the Linux login activity. 
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The who or w Command Two other ways to check for users on the system who 
are to enter either the command who or w. The who command displays the names of Command that displays the 
the users presently logged into the system. The w command provides similar infor- names of the users presently 
mation and provides additional details on each user, such as the following: logged into the system 


from: Specifies the domain where the user is logging in from Ww 
Command that displays the 


names of the users presently 
logged into the system plus 
what: Displays the last command entered by the user additional details on each 
user 


login time: Indicates when the user logged in 
idle: Indicates if the user has been busy on the system 


Figure 15-65 provides examples of the text displayed by using w and who 
commands. 


EIEE 


[root@localhost log]# w 

12:50pm up 19 min, 3 users, load average: 0,27, 0.13, 0,10 

SER TTY FROM IDLE JCPU PCPU WHAT 
9 localhost 12:48pm 1257 0.05: 0.05s -bash 

+0 19 +22 A A AZo 


Fa W 
oot pts/ 70 1:57 O,08s 0,02s telnet localhos 
[root@localhost log]# who 
usera pts/2 Feb 11 12:48 (localhost) 
root 3/0 Feb 11 12:33 (:0) 
root pts/1 Feb 11 12:46 (:0) 
[root@localhost log ]# 


ih o o t 








FIGURE 15-65 Examples of the text displayed by the w and who commands. 


Network Security 


The nmap Command An excellent security tool that runs on Linux is nmap. This nmap 
is a port scanner that is used by the network administrator to scan a local computer or A Linux port scanner 
other computers internal to the network to determine what network ports and services 

are being made available to users. For example, the command nmap localhost was 

entered to scan the Linux machine named localhost. Figure 15-66 shows the results 

of the scan. The scan shows that the ftp, telnet, smtp (email server), sunrpc (network 

file server), and X11 (the GUI for Linux) are all available. Notice that each service 

has a port number assigned to it. (The concept of port number was presented in Chap- 

ter 5.) For example, ftp is on port 21 and is running TCP. Telnet is running on port 23 

and is also running TCP. The network administrator may decide that the ftp or non- 

secure telnet service is a security threat and that it needs to be disabled. Note that this 
command can also be used to scan machines outside your network by simply substi- 

tuting an IP address for the machine name. For example, nmap 192.168.12.5 can be 

used to scan the machine at IP address 192.168.12.5. (Note: You should only use the 

nmap port scanning utility on your own machines!) 
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File Edit Settings Help 
[root@localhost log]# nmap localhost 





Starting nmap Y, 2.54BETAS1 € www,insecure,org/nmap/ ) 
Interesting ports on localhost.localdomain (127.0.0.1): 
(The 1549 ports scanned but not shown below are in state: closed) 


Port State Service 
21/tcp open p 
23/tcp open telnet 
25/tcp open smtp 
111/tcp open sunrpe 
6000/tcp open X11 


Nmap run completed -- 1 IP address (1 host up) scanned in 1 second 
[root@localhost log]# 


FIGURE 15-66 The results of using the nmap command to scan the Linux machine named 
localhost. 


Enabling and Disabling Boot Services 


chkconfig The chkconfig Command The next command examined is chkconFigure, which 
Command used by allows the administrator to enable and disable services at boot time. The options for 


administrators to enable and the chkconfig command are shown in Figure 15-67. 
disable services at boot time 


File Edit Settings Help 


[root@localhost log]# chkconfig 
chkconfig version 1.3.5 - Copyright (C) 1997-2000 Red Hat, Inc, 
This may be freely redistributed under the terms of the GNU Public License, 


usage: chkconfig --list [name] 

chkconfig --add <name> 

chkconfig --del <name> 

chkconfig [--level <levels>] <name> <onloff|reset>) 
[root@localhost log]# chkconfig --list 





FIGURE 15-67 The options for the chkconfig command. 


The administrator used the nmap command to check to see what network ser- 
vices were running. It was found that the ftp service was running (see Figure 15-66). 
The network administrator decided to disable the ftp service. The network adminis- 
trator can use the chkconfig --list command to view the services running on the sys- 
tem. The command is shown at the bottom of Figure 15-67. The results of entering 
the chkconfig --list command are provided in Figure 15-68. The last line displayed 
shows wu-ftpd: on. This indicates that the ftp server is on. The ftp service can be dis- 
abled by using the command chkconfig wu-ftpd off as shown in Figure 15-69. The 
chkconfig --list command can be used again to verify the service is off. The verifi- 
cation that wuftpd is off is provided in Figure 15-70. 
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0 
nfs lock 0 
identd 0: 
radyd 0: 
snmpd 0 
snmptrapd 0 
isdn 


PRR RRR RE 
++ ++ + $F $F +e HH HF 
hIbIRIRIRIDINIK 
+e +3 +3 +9 +3 +3 +9 +s 
EN ON OJ ON ON ON CN EN 
s+ s+ $+ $+ 44 44 $9 $9 
SHELL HLHLEaH 
++ ++ $+ $F $F be HH HF 
an oan oan an an oan an an 
O O O O O O O o 
s+ ++ $+ $+ 44 $+ 06 44 


wine 0: 
xinetd based services? 
chargen-udp + 
chargen? 
daytime-udp + 
daytime: 
echo-udp + 
echo: off 
services? 
servers? 


telnet? on 
wu-ftpd: 
[root@localhost log]# 


File Edit Settings Help 


[root@localhost log]# chkconfig wu-ftpd off 
[root@localhost log]# Jj 





FIGURE 15-69 Using the chkconfig wu-ftpd off command to disable the ftp service. 


File Edit Settings Help 


Oroff 
nfs lock Otoff 
identd Otoff 
radyvd Oroff 
snmpd Otoff 
snmptrapd Otoff 
isdn Otoff 
wine Otoff 
xinetd based services: 

chargen-udp + 
chargent 
daytime-udp + 
daytime: 
echo-udp: 
echo: off 
services? 
servers? 
time-udp? 
time: off 
sgi_fam: 
rsync: off 
telnet: on 


hIBININIRININIh 
+4 +4 +t FF HF tH He OF 
WW ON ON ON CN OJ EN 
++ +h tt tH 4H He tH HF 
o oan oa o oa o o o 
O O O O O O O O 
TETETETETETETET 


— a a la Ml Ml Ml Ml 
++ ++ FH $F $F +e $F H 
hhh i 
++ + +o + $e $F $F HF 


wu-ftpd + 
[root@localhost log]# 





FIGURE 15-70 Using the chkconfig --list command to verify the service has been disabled. 


The netstat -ap Command Another command used by the network adminis- netstat -ap 


trator is netstat -ap. This command provides information about the network connec- Provides information about 


tions that exist on the system. This includes internal programs and connections to the the network connections 
outside world. This command is very useful when the network administrator wants to 
determine if a machine is being used by unauthorized users, for example, as a music 
server for the Internet. The netstat command will list the connection, and it also will 
list the name of the program that is allowing the connection to be made. An example 
of using this command is provided in Figure 15-71. In this example, the netstat -ap | 
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more command is used. This pipes the file contents to more to make it easier to view 
the entire contents. The far right side of Figure 15-71 shows if the connection is in the 
listen or established mode. Listen means that the program is waiting for a connection 
to be started. Established means that a connection has already been made. For exam- 
ple, a TCP connection is established at port 3102, and the name of the program 1s 
in.telnetd, which 1s the telnet-server. 





= alhost/var/log E _ RENE 
[root@localhost log]# netstat -ap | more aj 
Active Internet connections (servers and established) 

Proto Recy-Q Send-Q Local Address Foreign Address State 
PID/Program name 

tcp 0 O *232768 tt LISTEN 
799/rpc.statd 

tcp 0 0 localhost,localdo:37517 *:% LISTEN 
979/xinetd 

tcp 0 0 *tsunrpec ktk LISTEN 

771/port map 

tcp 0 0 *tx11 px LISTEN 

1189/x 

tcp 0 0 *itelnet ži LISTEN 
979/xinetd 

tcp 0 0 localhost,localdom:smtp *ł* LISTEN 
1020/sendmail: acce 

tcp 0 0 localhost,locald:telnet localhost, localdo?33510 ESTABLISHED 
3102/in,telnetd: lo 

tcp 0 0 localhost, localdo?33510 localhost, locald:telnet ESTABLISHED 
3101/telnet 

udp 0 0 *332768 *t* 

799/rpc ,statd 

udp 0 0 *tsunrpc kik 

Hore = 





FIGURE 15-71 An example of using the netstat -ap command to view the network 
connections running on the machine. 


15-8 MANAGING THE LINUX SYSTEM 


This section examines some of the management tools available with the Fedora Core 
8.0 distribution. The previous sections in this chapter examined the Linux command 
structure as input from the command line interface. While it is true that the network 
and system administrators insist that any member of the network management staff 
fully understand Linux operation from the command line, they also understand the 
benefits of using the well-developed GUIs available for Linux such as those available 
with the Red Hat 8.0 distribution. The obvious benefits of using the GUI management 
tools are time savings, and additionally, the dependencies for any software installa- 
tion/deletion are automatically checked for you. 

system-config- <tool- In Fedora Core 8.0, the System Config tools, which are the system adminis- 

name> tration tools, are all prefixed with system-config followed by the name of the tool. In 

Command for displaying the order to get to the tools, log in as root, and at the command line enter system-config- 

system configuration GUI for <tool-name>. The menu for the tool being requested will be displayed. 

a specified tool The list of system configuration tools can be displayed by changing the direc- 


ls system-config- * tory to /usr/bin and entering the following command from the prompt [ root@bob 
Command for listing the bin] ls system-config-*. The list generated by this command is provided in Figure 
system configuration tools 15-72. There are many configuration options available for the user and the adminis- 


trator. A few of the menus are discussed next. The GUIs are fairly intuitive and typi- 
cally don’t need a lot of discussion to understand how they work. Examples of the 
system-config GUIs are provided next. 
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x Fool@bob/ust/bin © 
[Lroot@bob bin]# ls system-config-* 
sustem—-confisg-authentication 
sustem-config JOt 
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ar 
a T ee | 
em- 
j 


j 
4 

SUS em-cornrt LẸ 

system-cont1ig-time 

j 


stem-config-users 


= =A- L = 
[root@bob bin]# H 





FIGURE 15-72 The list of the system-config- files. 


For example, system-config-date is the GUI that allows you to change the time 
and date for the computer. Entering the command system-config-date will display the 
menu shown in Figure 15-73. This menu also allows you to set the time zone and also 
enables you to point this menu (via an IP address) to a time server for obtaining the 
current time for your location. 

The next GUI menu displayed (Figure 15-74) is for the firewall. The firewall 
menu settings can be displayed by entering system-config-firewall at the command 
line. You can disable a firewall, configure additional settings, or modify the firewall 
configurations. This allows you to open ports and block ports, and all the settings are 
GUI based, which simplifies the tasks. For example, if you want to block port 80 
(HTTP), simply click the check box for WWW(HTTP) and click Disable. On the 
left side of the menu are other options such as selecting other ports that are not de- 
fined on the main menu screen. You also have settings for trusted services, mas- 
querading (network address translation), and a place for setting custom rules for your 
firewall. 

There are many important issues that the network/system administrator faces, 
but security should be the top concern. When you first go out to install a new service 
or are maintaining existing systems, the most important issue is the system security 
and preventing outside threats. You want to fully understand the implications of in- 
stalling the software and how the installation can possibly affect the overall network. 
The following is a list of some of the questions that should be asked: 


e Who will be the users of the software, and what applications are they going to 
be running? 

e Will they need special permissions? 

e Will the software being installed require a firewall? 

e Does the software introduce any security threats? 
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| Current Time : 
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FIGURE 15-73 The system-config-date menu. 


File Options Help 


@ 
Wizard Apply Reload | Enable Disable 








Trusted Services Here you can define which services are trusted. This means that these 
Other Ports services will be accessible from all hosts or networks. 


Trusted Interfaces | Service _Port/Protocol 

O DNS : 53/tcp, 53/udp 
Custom Rules E] FIP ; 21/tcp 

O “IMAP over SSL 7 993/tcp 
Vi 3 IPsec ; -1/ah, -1/esp 
[ Mail (SMTP) 25 /tep 
@ Multicast DNS (mDNS) 5353/udp 
A : Network Printing (IPP) : 631/tcp, 631/udp 
-NFS4 : 2049/tcp, 2049/udp 
: OpenVPN 7 1194/udp 
: POP-3 over SSL ' 995/tcp 
‘RADIUS '1812/udp, 1813/udp 
“Samba | 137/udp, 138/udp, 139/tcp, 445/tcp 
: Secure WWW (HTTPS). 443/tcp 
-SSH -22/tep 
“WWW (HTTP) “Bo/tcp 





Masquerading 


o o a o a o a 


N Please remember to allow access only for services, which are really 
necessary to access. 





The firewall is enabled. 





FIGURE 15-74 The system-config-firewall menu. 
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Regardless of the installation, you will have to set limits for security reasons. 
You don’t want your system to get hacked, and firewall protection is a very good start. 

Figure 15-75 shows the menu for the network settings. This menu is displayed 
by entering the system-config-network command when logged in as root. This is a 
good place to start when setting up your computer on a network for the first time. This 
tool allows you to set the IP address, subnet mask, host name, and DNS server ad- 
dress. You can also activate or deactivate the networking devices (for example, NICs) 
from this menu by selecting the check box for device and clicking the activate or de- 
activate button. 


File Profile Help 


ij © 8: @ © 


New Edit Copy Delete Activate Deactivate 


Í Devices | Hardware DNS ‘Hosts 


z to You may configure network devices associated with 
Ha physical hardware here. Multiple logical devices can be 
associated with a single piece of hardware. 








Profile Status Device Nickname Type 
x- Inactive rf -ethl ethl Ethernet 


& Inactive @ethO etho Ethernet 
J Active @peth2 eth2 Ethernet 

















Active profile: Common (modified) 


FIGURE 15-75 The system-config-network menu. 


The next menu (see Figure 15-76) is for system-config-packages. This menu is 
a convenient way to add/remove software on your computer. There are tabs for 
Browse, Search, and List that are used to find software packages and also for in- 
stalling/removing various software packages. This menu provides the same function 
as the rpm -i command used to install RPMs from the command line. The advantage 
of using the GUI is that the dependencies for the various software packages that are 
being installed or deleted are automatically checked. This helps keep the database of 
software applications cleaner. 

The next menu, shown in Figure 15-77, is for system-config-printer. This menu 
is used for adding various types of printers to the system. The Red Hat software will 
have most of the commonly used printer drivers installed with the software; however, 
not all drivers will be there. In the case of a missing printer driver, the system ad- 
ministrator will have to download the driver from a CD or from the Internet. The best 
locations to locate a printer driver are the manufacturer’s web site. In some cases you 
might have to do an Internet search for the driver, but make sure you download the 
driver from a trusted site. 
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File Edit View Help 


Browse | í 











Desktop Environments LA) © Authoring and Publishing 


Applications [7 O Editors 
Development 


Servers 


@ ™ Educational Software 
is C: Engineering and Scientific 


Base System eh v Games and Entertainment 


Educational software for learning 


1 of 10 optional packages selected 


Optional packages 





FIGURE 15-76 The system-config-packages menu. 


File Edit Help 


D Gp aA 8 
New Printeri New Class Copy Delete Goto Server Refresh 


Server Settings Basic Server Settings 
Show printers shared by other systems 
[C] Share published printers connected to this system 
| Allow pnnting from the Internet 
[C] Allow remote administration 
[C] Allow users to cancel any job (not just their own) 


[C] Save debugging information for troubleshooting 











Connected to localhost 


FIGURE 15-77 The system-config-printer menu. 
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The next menu is for system-config-users. This menu (Figure 15-78) is used 
for the management of the users. You can add/modify/delete users and groups from 
this menu. Examples of users with their Username, User ID, Primary Group, Full 
Name, Login Shell, and Home Directory are displayed. 


File Edit Help 


= isi 


Add User Add Group Properti: Delet Refresh Help 





Search filter: | | | Apply filter | 


Users Groups 








User Name User ID v Primary Group |Full Name Login Shell Home Directory 
asanchez 500 : asanchez Abel Sanchez: /bin/bash /home/asanchez 
demo -501 demo : : {bin/bash 3 /home/demo 














FIGURE 15-78 The system-config-users menu. 


The next menu, shown in Figure 15-79, is for systems-config-services. This 
GUI is used to start/stop/restart services. For example, the network services can be 
stopped by clicking the Network button and clicking Stop. For example, the ssh ser- 
vice can be stopped from the GUI by clicking sshd and then Stop. This is equivalent 
to entering the command service sshd start command. 
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File View Actions Edit Runlevel Help 


These services are started once and run in the 
background. You can specify in which runlevels they are 
started. 


Currently Running in Runlevel: 5 Editing Runlevel: 5 
Py Description 
8 Ra Startup/shutdown script for the Common UNIX Printing 
Start Stop Restart System (CUPS). 


Jl: ConsoleKit 

Jl: NetworkManager 

O 3 NetworkManagerDispatche! 

WI: acpid Status . 

Jl: anacron cupsd (pid 1934) is running... 
Vi: atd 

|: auditd 

Ji: avahi-daemon 
Jl: bluetooth 

O: capi 

Jl: cpuspeed 

J: crond 

Yi cups 

O: dund 

Jl: fedora-live 

Jl: firstboot 

C]: gpm 

Ji: haldaemon 
J: ip6tables 

Jl: iptables 
O: irda 

V: irgbalance 











FIGURE 15-79 The system-config-services menu. 


This section has presented a look at using the GUI in the Red Hat distribution 
for managing the various functions. The GUI greatly simplifies the management 
tasks, but never overlook the importance of using the command line interface. 
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SUMMARY 


This chapter has presented numerous examples of using commands to administer the 
Linux operating system. The student should appreciate the complexity of configur- 
ing the Linux network server and the fact that administering a computer network re- 
quires the input of personnel with varied skills. The student should also understand 
that this has only been an introduction to the Linux operating system. The chapter 
demonstrated how to use many commands, one of the most important of which is how 
to read the online text man pages. There is a wealth of information about Linux on 
the Internet. The online distributions for Linux can be found at http://www. biblio.org. 
The Linux concepts students should understand from this chapter include the fol- 
lowing: 


e The logon/logoff procedures for Linux 

e The steps for adding users to a Linux machine 

e The Linux file structure and related file commands 

e The use of key Linux administration commands 

e How to add applications to Linux 

e How to place a Linux machine on the network 

e How to configure Web services for Linux 

e The procedures and tools for using Linux to troubleshoot Linux systems and 
networks 


The following are sites where you can download a bootable version of Linux 
running off one CD. This means you don’t have to create dual-boot partitions on your 
computer or set up a separate machine running Linux. These bootable versions are 
available from both Red Hat and Knoppix. The latest “Live” version from Fedora is 
available at http://fedoraproject.org/get-fedora (698 MB) and will fit on one CD. 

Knoppix is available from www.knoppix.org or from a mirror site such as 
http://cs.wisc.edu/pub/mirrors/linux/knoppix/. As of this writing Knoppix is at ver- 
sion 5.3. The file size is approximately 698 MB and will fit on a CD. 

The files for Red Hat “Live” and Knoppix are ISO images, and the ISO image 
is a disk image of an ISO 9660 file system. The file needs to be converted into a func- 
tional file system before using. This is done when the file is written to a CD using 
software capable of writing ISOs to CD and making the CD bootable. Most CD burn- 
ing software for Windows, Mac OS, and Linux will have this capability. Once you 
write the ISO file to CD, the CD can be used to boot the computer, and you will have 
Linux running on your computer after the boot process is complete. 





QUESTIONS AND PROBLEMS 


Section 15-2 


What are the steps for entering the menu to add a user in Linux? 
What is the purpose of the Linux login shell? 

How can Linux be closed from the Linux GUI? 

How is the command line accessed in Linux? 

What is the Linux command to list only files? 


Ae eS 
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2), 


w N p 


11. 
12. 
13. 


14. 
15. 
16. 
17. 
18. 
19. 
20. 
21. 


22; 


23. 


24. 


What Linux command provides a long file listing that includes file attributes? 
What Linux command lists hidden files and file attributes? 

What two Linux commands can be used to display file contents? 

How do the more and cat commands differ? 

What is the user ID for root? 

What directory are the binary process and executables located in Linux? 
What is typically placed in the /etc directory? 

Match the following directories to their contents: 


1. /boot a) location of all user directories 

2. /dev b) system log files, email folders 

3. /home c) location of user files related to user programs 
4. /mnt d) location of the Linux kernel 

5. /root e) drivers for monitors 

6. /tmp f) the home directory for root 

7. /usr g) temporary holding area for applications 

8. /var h) the location of mounted directories 


What is the Linux command for displaying a working directory? 

What is the Linux command for creating a directory named chile? 

List the command for removing a file named aaron. 

List the command to rename a file named aaron.txt to bueno. txt. 

The command chmod 411 drb.txt is entered. What does this do? 

The command chmod 644 djb.txt is entered. What does this do? 

The command chmod 755 krcb.txt is entered. What does this do? 

The permissions for the file hbmbb.txt need to be set so that only the owner has 
permission to read and write the file. List the command that does this. 

List the command to set the permissions on the text file dapab.txt to the 


following: 
Owner: read/write 
Group: read 


Outside: no access 

List the commands for setting the permissions on bc.txt to the following: 
Owner: read/write/executable 

Group: read/write 

Outside: read 

The new owner of the file CQ.txt is dd. Enter the command to change 
ownership. 

The new group for the jc.txt is heaven. Enter the command to change 
ownership. 


Section 15-4 


20. 
Ali 
26. 
29. 
30. 
31. 


What command displays the online text manual for Linux? 

List the command that returns all man pages that mention the topic Apache. 
Why is the ps -a command used? 

How is a program with a PID of 1020 shut down? 

What command can be used as a last resort to kill a process? 

Root is logged onto a Linux machine and needs to become another user to ver- 
ify the changes made to the user’s account. What command is used for root to 
become the user? 
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32. Usera is logged into Linux and wants to become userb. What is the command, 
and what are the steps required to make this happen? 

33. What information is contained in the fstab file? 

34. What is kudzu? 

35. List the command for mounting a USB drive. 

36. List the Linux command that is used to verify a drive has been mounted. 

37. What command must be entered before the media can be removed from a drive 
that has been mounted? 

38. List the command to gracefully shut down the Linux system. 

39. The last command entered from the command line in Linux can be repeated by 
pressing what key? 

40. What command can be entered in Linux to display previously entered 
commands? 

41. What is the keystroke that can be used to complete entries on the command 
line? 


Section 15-5 


42. List the command to search for installed applications on Linux. Use the pipe 
command to display only results with wu-ftpd in them. 

43. What command is used to find out where a file comes from? 

44. What is the Linux command to uninstall an application? 

45. What is the Linux command for installing an application? 

46. How is a service controlled by xinetd enabled after installation? 

47. What command starts the Apache Web server? 

48. The script for starting the Apache Web server is found in what directory? 

49. The index.html file is found in what directory in Linux? 

50. The httpd.conf file is located in what directory in Linux? 

51. The Apache Web server can be restarted using what command? 

52. What is the Linux command for listing all network interfaces running on the 
system? 

53. What is the subnet mask called in Linux? 

54. How is the Ethernet! network interface card identified in Linux? 

55. The ifconfig command is entered and lo is displayed. What is this? 

56. List the command to change the IP address of the EthernetO network interface 
to 10.10.20.5 with a subnet mask of 255.255.255.0. 

57. List the command to shut down the Ethernet! network interface. 

58. What command can be used to verify that a network interface is down? 

59. What is the command to bring a network interface back online? 

60. What command shuts down all network interfaces? 

61. List the Linux command for starting the network interfaces. 

62. What command can be used to verify that the network has started? 

63. List the command for adding a gateway address for the Linux network 
interface. 

64. The Linux network programs use a set of scripts found in what directory? 

65. What is the command to install the openssh-server in Linux? 

66. FTP is being used to connect to another machine. List the command that in- 
structs the FTP server to prompt for a user’s password. 
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67. The Washington University FTP server is to be installed on a Linux machine. 
Provide the command and steps required to install the server and make the ser- 
vices available. 

68. The list of information for the DNS service is found in what directory in Linux? 

69. List the command for changing the hostname of the Linux machine to chip. 


Section 15-7 


70. Why is the dmesg command used? 
71. What is the Linux command to reboot? 
72. Match the following Linux troubleshooting files with their contents. 


1. boot.log a) keeps track of user login 
2. lastlog b) log of mail activity 
3. maillog c) keeps track of the boot process 
4. messages d) tracks users entering or exiting the system 
5. secure e) report on hardware or software errors 
6. spooler f) mail management 
73. List two commands to check for users that have logged onto the system since 
the last reboot. 
74. Which command lists all users that have logged onto the system since the last 
reboot? 


75. What is the command to scan a computer to determine what network ports and 
services are being made available to users? 

76. List the command used to enable and disable services at boot time. 

77. The services running on a Linux machine can be listed by entering what 
command? 

78. Write the command to disable the wu-ftpd service. 

79. Identify the command that provides information about network connections 
that exist on the system. 


Critical Thinking 


80. You suspect that someone has broken into a computer. Discuss the steps you 
might take to correct the problem. 

81. You are attempting to install the Apache Web server, and a prompt is displayed 
that states a certain application is missing. Describe how this problem can be 
corrected. 

82. What questions should you ask when installing new software on any machines 
attached to your network? 

83. What steps can you take to find a printer driver that isn’t included with a Linux 
distribution? 
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OBJECTIVES 


e Learn the key issues associated with indus- 


trial networks 


e Became familiar with the various industrial 


Ethernet protocols used in industrial net- 


e Examine the key characteristics of industrial works 
networks e Examine legacy device and controller level 
e Understand the role of Ethernet in industrial buses 
networks 
KEY TERMS 
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hierarchy single point-of-failure UDP/IP 
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determinism shadowing objects 
CAN legacy protocol Foundation Fieldbus 
information level industrial Ethernet HSE 
statistical data Just-in-time and Lean Profinet 
control data linear network topology IDA 
COTS Ethernet ring RTPS 
device level light duty MMS 
intelligent (smart) devices heavy duty Modbus TCP 
controller level armored 
interoperability Ethernet/IP 
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16-1 INTRODUCTION 


A minirevolution has started in plant automation in the past few years. Industrial net- 
works are moving away from proprietary fieldbus protocols and adopting open net- 
work standards such as Ethernet and TCP/IP. (Fieldbus is an open standard developed 
in the late 1990s for networks that require guaranteed message delivery.) This evolu- 
tion in industrial networks will enable manufacturing floor and process industry en- 
terprises to be fully interconnected, from the factory floor to the business office and 
out to other factories or the corporate headquarters. There are many advantages for 
adopting an open industrial network standard: 


e A standardized network interface for all floor equipment 

e A potential decrease in network equipment cost through the use of standardized 
equipment 

e Flexibility of interconnecting the equipment 


The adoption of an open industrial networking standard means there will be in- 
creased compatibility between different equipment manufacturers and an increased 
capability to obtain and share manufacturing data. It is generally agreed that the ba- 
sis for the industrial networks will be industrial Ethernet, although there is still much 
variation among industrial Ethernet standards. It is important to understand that Eth- 
ernet will not immediately replace the legacy networks already in place on the man- 
ufacturing floor. Industry tends to move conservatively because of the enormous costs 
involved with networking the plant and the much higher standards the equipment and 
systems must maintain. 

This chapter presents an overview of the issues and protocols associated with 
industrial networks. A basic overview is presented in section 16-2. Here the reader 
will gain an understanding of the key issues associated with industrial networks. In- 
dustrial networks have distinct requirements that differ greatly from the commercial 
data network. Section 16-3 examines industrial Ethernet, considered to be the 
strongest contender for a universal standard in industrial networks. The key issues ex- 
amined in this section are determinism and topology of the industrial network. The 
Ethernet protocols used in industrial Ethernet are examined in section 16-4. Section 
16-5 presents a brief overview of legacy device and controller level buses. 

There are many protocols competing for use on the manufacturing and pro- 
cessing floor. Recent technology developments in the architecture of network hard- 
ware have made it possible for industry to begin integrating conventional networking 
methodologies into the plant. The advantage of doing this is the ease of sharing of the 
data from the floor with other parts of the enterprise with the move to an open net- 
working standard such as Ethernet. 


16-2 OVERVIEW OF INDUSTRIAL NETWORKS 


Industrial Networking Computer networks are changing today’s enterprises. Businesses are interconnected 
The process of networking with high-bandwidth data lines that enable the transfer of data, voice, and video at as- 
the manufacturing floor with _tonishing rates. Computer networks are also changing the manufacturing floor and 
the enterprise process industries. The generic term for this network development is industrial net- 
working. 
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The network requirements for industrial and manufacturing processes differ 
greatly from the typical campus network (for example, commercial, university, and 
business complex systems). The components used in industrial equipment are ex- 
posed to harsh environments, high levels of electrical noise, poor power quality, and 
extended hours of operation. Industrial network systems must have higher reliability 
than conventional computer networks because the hazardous nature of industrial 
processes makes outages both dangerous and expensive. Many industrial and manu- 
facturing processes deal with large amounts of energy (temperatures, currents, 
masses, etc.), and accidents due to the loss of network control tend to do far more 
damage than do similar outages in commercial systems. Even without damage, stop- 
ping an industrial process due to network downtime is expensive. For example, down- 
time for a paper mill is usually measured in tens of thousands of dollars per hour. 

The three major differences between industrial and commercial networks are 


1. Hierarchy: Used to divide the industrial network by function. These functions Hierarchy 
are divided into three levels: the information level, the controller level, and the Used to divide the industrial 
device level. network by function 
2. Redundancy: Incorporated into industrial networks to eliminate downtime due Redundancy 
to single points-of-failure. Industrial network topologies tend either to be in- Added to networks to 
herently redundant using ring topologies or to have dual, independent operat-  stiminate single points-of- 
ing networks. failure 
3. Determinism: The ability of a network to have a guaranteed worst-case packet 
delivery time. Some levels of the industrial network require that data must be Determinism 
delivered at much tighter tolerances. A good example of this is the CAN (con- The ability of a network to 
troller area network), which was designed to allow microcontrollers to com- nave guaranteed aes a 
municate with each other. In fact, this network is being used to replace wiring ase a a Hille 
harnesses in cars. When the driver steps on the brakes, a data packet willbe sent (CAN 
over the CAN to the car’s master cylinder, instructing it to apply the brakes. Its Controller area network, 
delivery must be reliable and deterministic. allows microcontrollers to 
communicate with each 
other and was originally used 
Characteristics of Industrial Networks in automotive applications 


Many areas of industrial networking overlap commercial networks in their use of 
components, topology, and protocols. However, industrial networks have unique 
needs requiring the use of specialized networking equipment and techniques. There 
are eight characteristics of industrial networks (shown in Figure 16-1) that will be dis- 
cussed in this section: 


e Hierarchy 

e Timing considerations 

e Efficiency 

e Topology and redundancy 

e Distance and number of devices 
e Interoperability 

e Message length 

e Vendor support 
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Information Level 

The hierarchical level of 
industrial networks that 
contains mostly statistical 
data 


Statistical Data 

Data that can tolerate delays 
in data delivery such as that 
used for quality reports, 
database information, 
accounting, and job control 
information 


Control Data 

Not usually tolerant of data 
time delivery but can include 
some control data such as 
alarm sharing, machine 
status, and utility systems 
status that can tolerate 
some variability in data time 
delivery 


COTS 


Commercial-off-the-shelf 


Device Level 

Where the network 
interfaces to the 
manufacturing or process 
machinery 
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FIGURE 16-1 The eight characteristics of industrial networks. 


Hierarchy Most industrial networks break down into the three hierarchical levels 
shown in Figure 16-2. These three levels are the information level, the controller 
level, and the device level. The type of information transmitted characterizes each 
level. The information level contains mostly statistical data such as that used in 
quality reports, database information for trending and statistical analysis, accounting, 
and job control information. Statistical data can tolerate some uncertainty in delivery 
times and can also tolerate delays on the order of seconds. The information level may 
also transmit low priority control data. Control data is usually intolerant of trans- 
mission uncertainty, but some control data such as alarm sharing, machine status, and 
utility systems status can tolerate uncertainty. 

The physical location of the equipment in the information level is usually bet- 
ter protected from the harsh plant floor environment (for example, high levels of elec- 
trical noise, poor power quality, and extended hours of operation). This level is often 
implemented with commercial-off-the-shelf (COTS) equipment and standard Ether- 
net/TCP/IP implementations if the equipment is protected and the control data can 
tolerate uncertainty in delivery time. 

At the other end of the spectrum is the device level, where the network inter- 
faces with the machines on the floor (for example, robots, motors, drives, and sen- 
sors). The device level has proven to be most difficult to implement in Ethernet. The 
challenge is that most industrial systems run on older buses that are not compatible 
with Ethernet. However, industrial Ethernet (see section 16-3) is being used to trans- 
port embedded packets for these older buses. The following are common older buses 
on the device level: 


e ProfibusPA: This bus allows I/O devices to be connected on one common bus 
line. 

e Foundation Fieldbus: This bus is an open standard that is owned by a consor- 
tium of manufacturers and industry groups. The Foundation protocol uses lay- 
ers 1, 2, and 7 (physical, data link, and application layers). It is similar to 
Profibus except for signaling methods and encoding. 


Industrial Networks 
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e DeviceNet: This bus was developed by Allen Bradley and interfaces very well 
with programmable controllers. It is a local, device-level network, operating 
typically with up to 64 points within about 1,000 feet. 
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FIGURE 16-2 The three hierarchical levels of an industrial network. 


At the device level, response time becomes critical. Data must be delivered on 
the order of milliseconds with no uncertainty in delivery time. In other words, the 
data must arrive when expected. Until recently, this inflexibility led to most systems 
being wired point-to-point. Each sensor, switch, and output device was wired directly 
to the controller using a separate pair of wires. 

The ultimate goal of industrial networks may be for each discrete level device Intelligent (Smart) 
to have its own IP address. Presently, most discrete level devices are connected tore- Devices 
mote I/O (input/output) cabinets that have networking capability. Each I/O cabinet Devices that can 
can have several hundred discrete input or output devices connected to it. Some of | communicate directly to a 
the hardware devices at the device level such as motor drives and pressure transduc- controller using point-to- 
ers have networking capability. These devices are usually referred to as intelligent or Point or multidrop wiring 
smart devices. These devices can communicate directly toa controller using point- Controller Level 
to-point wiring or over a multidrop bus such as DeviceNet or ProfibusDP. R S cone nt 

The controller level is located between the information level and the device communication with other 
level (see Figure 16-2). The controllers provide constant communication with other controllers and the device 
controllers, the device level machinery, and the information level. The recent focus and information levels 
of much of the development of industrial Ethernet is at this level. Until about 1995, 
most of the buses at this level were proprietary buses developed by the controller Interoperability 
manufacturer. Examples of these types of buses are Allen Bradley’s DataHighway, bility for the equipment to 
Texas Instruments’ TiWay, and Modicon’s Modbus. These proprietary buses pre- work together 
sented major problems to the end user because of the lack in interoperability: The 
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buses didn’t work together. User dissatisfaction with these problems led to the devel- 
opment of open systems such as ControlNet, Fieldbus, and others. Industrial Ether- 
net is rapidly replacing both the proprietary and open buses. Unfortunately there is no 
single industrial Ethernet protocol to replace them. The key industrial Ethernet pro- 
tocols are examined in section 16-4. 


Timing Considerations The major obstacle barring the industrial adoption of 
Ethernet into the controller level is that Ethernet is nondeterministic. As noted, de- 
terminism is a guaranteed maximum worst-case delivery time that is required for real- 
time data transmission. The ability of multiple devices to contend for the transmission 
media simultaneously (CSMA/CD) guarantees data collisions and retransmissions. 
Improvements in Ethernet speeds and the use of layer 2 switches to isolate collision 
domains and other factors have produced a sufficiently deterministic network to work 
in most slow-speed process control applications, but the requirements of higher speed 
applications such as machine control are still not satisfied. Techniques for achieving 
determinism are examined in section 16-3. 


Efficiency The issue of efficiency examines the amount of work that must be done 
to send data in the network. Specifically, the key issues are the message overhead, the 
quantity of messages, and CPU utilization. 


Message Overhead 


Ethernet’s minimum packet length is 64 bytes. To send one byte of data requires 64 
bytes to be transmitted. In the information level, data is rarely one byte long; more 
often it is kilobytes long. This makes a 64-byte overhead reasonable. But at the de- 
vice level, most data sizes are less than two bytes. The most common analog data 
word size is 12 bits. It is very inefficient to require 64 bytes of overhead to send 1.5 
bytes of data. 


Message Quantity 


At low traffic levels, some inefficiency can be tolerated. However, industrial systems 
normally have hundreds or thousands of devices. An automotive assembly plant can 
have 250,000 switches alone. Because these switches are usually transmitted in 
groups of 16 (two bytes), reading each switch over an Ethernet system would require 
250,000 x 64 = 4 MB of packets. If each switch is to be read every 10 ms, this pro- 
duces 400 Mbps. Networks begin to degrade at 40-50 percent of capacity, and it be- 
comes apparent that efficiency is a major stumbling block to moving Ethernet into the 
device level. 

At the controller level, the picture is somewhat brighter. Controllers tend to 
transmit information in blocks, which is much more efficient. Now instead of using 
64 bytes to transmit 16 switch states, they use 1024 bytes to transmit 500 states. 


CPU Utilization 
PLC The important issue is how much of the computer’s processing time is required for 
Programmable logic communicating with the robotics, motors, sensors, and PLCs (programmable logic 
controller controllers). Not all industrial interfaces provide a communications controller. This 


means that the computer connected to the device must manage all aspects of com- 
munication with the device. Therefore, the computer’s CPU will be very busy pro- 
cessing the data transfers to and from the device. In the case where a communications 
interface is included, the computer only has to read and write data. This requires sig- 
nificantly less CPU processor time and yields a much more efficient system. 
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Topology and Redundancy In the information level, issues of topology and re- Single Point-of-failure 
dundancy are essentially the same for a commercial network and need not be dis- A single failure of any 
cussed here. But at the controller level, conditions mandate extra concern because device, component, cable, or 
industrial networks cannot tolerate downtime due to a single point-of-failure. A sin-  Sottware entity that can shut 
gle point-of-failure 1s where a point-of-failure could shut down part of the network. down part of the network 
Within a commercial network there are topologies that introduce single points-of- 

failure because network outages in these areas do not justify the additional cost of 

providing redundancy. However, industrial networks have such high outage costs that 

it is cost effective to eliminate some or all of the single points-of-failure. 


Redundant Power Supplies 


It is possible to purchase key components such as switches with redundant power in- Hot Standby 

puts. This allows two independent power supplies to be connected in a hot standby Both supplies are operating 
configuration. Both supplies are operating all the time, but only one is providing all the time, one online and 
power (the primary unit). Should the primary unit fail, the standby supply is already the other operating as a 


up and running, and the equipment can switch to it in microseconds and stay online. Packup ready to be switched 
online in case of a failure 


Ring Topology with the primary power 


Many manufacturers provide ring controllers that remove the media as a single point- supply 


of-failure. Token ring networks have problems with devices “swallowing the token” 
and having to use complicated protocols to recover it. In industrial rings this problem 
is avoided by having the network operate as a bus with one of the connections to the 
ring controller being idle except for a watchdog packet that circulates around the ring. 
When this packet is not received, the ring controller activates the standby connection, 
and the system operates as two buses connected by a switch. In order to remove the 
ring controller as a single point-of-failure, some networks interconnect two rings with 
standby links so that if one controller fails, the other controller “absorbs” the first 
controller’s ring. This results in some system degradation, but at least there is not an 
outage. 


Redundant Stars 


This is a cost-effective solution for adding redundancy that requires each device to Shadowing 

have two network interface ports. Each port connects to a dual switch. The dual Switches with identical 
switch maintains two independent switches, with the standby switch shadowing the address tables that allow 
active switch. Shadowing consists of maintaining identical address tables and other seamless transfer between 
data structures to allow “seamless” transfer between the switches if a failure should the switches if a failure 
occur. An example of a redundant star topology is provided in Figure 16-3. Suara OGAN 


Distance and Number of Devices The relationship between distance and net- 
work speed is well-documented: The longer the distance, the greater the delay. At the 
controller level of an industrial network, these issues become critical. Industrial dis- 
tances may be very long compared to commercial applications. In process industries, 
applications tend to span large areas with thousands of devices. Even in manufactur- 
ing industries, cell and production line-sized networks are still large compared to 
commercial and campus networks. 


Interoperability It is necessary for protocols to communicate with other proto- 
cols at each of the three hierarchical levels of an industrial network. At the informa- 
tion level, this is not a major problem because most protocols at this level were 
designed with interoperability in mind. 
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FIGURE 16-3 An example of the redundant star topology. 


Legacy Protocol It is a very different picture at the device level. Most legacy protocols are 
A protocol that is in place proprietary, and no effort was made by manufacturers to allow their protocol to com- 
and cannot be replaced municate with competitor protocols. A legacy protocol is one that is in place at de- 


primari ly for operational and —_ sion time and that cannot be replaced for operational, economic, or political reasons. 
en neg Upgrades and changes tend to be done much less often and are more expensive. Be- 
cause of the expense and danger involved, industrial users tend to be very conserva- 
tive about change. The bottom line is that the newer system must operate with the 
older one. 
The following are examples of legacy protocols at the device and controller 
levels: 


e RS232, RS422, or RS485: These are still very popular serial protocols, with 
the RS485 standard being most frequently used. 

e DeviceNet, Modbus, and DataHighway Plus (DH): These are examples of 
proprietary buses. Many of them have been replaced by their manufacturer with 
open buses. For example, DH is a proprietary Allen Bradley standard that Allen 
Bradley has replaced with IndustriallIP. 

e Profibus, Fieldbus, and others: Examples of open buses in the sense that the 
details are public but are still tied to specific manufacturers. 

e Ethernet devices restricted to operate only at 10 Mbps. 


Message Length At the information level, a few messages are transmitted that are 
generally several hundred to several million bytes in length. At the device level, how- 
ever, Many more messages must be transmitted that are much smaller. As mentioned 
in the subsection on efficiency, there is a network overhead (packet headers, error de- 
tection, etc.) associated with each packet. Because of the wide variance in message 
length, it is impossible to build a system with optimized performance for all levels. 
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Vendor Support Manufacturing and industry demand, pay for, and receive much 
better support for their networks. At the highest level of support are plants that have 
vendor field technicians and engineers onsite 24/7 (24 hours per day, 7 days per 
week). Most vendors maintain 24-hour hotlines with highly trained support person- 
nel answering the phones and with engineers and senior personnel on call. Customers 
can purchase support contracts that guarantee onsite support within a specified time, 
usually within hours. Many vendors have equipment that allow offsite experts to ac- 
cess, troubleshoot, and configure the equipment. 

This section has presented an overview of the key issues in industrial networks. 
The reader should now have developed an understanding of the three hierarchical lev- 
els of an industrial network (information, controller, and device) and the eight char- 
acteristics of industrial networks. 


16-3 INDUSTRIAL ETHERNET 


The objective of this section is to develop an understanding of the role of Ethernet in Industrial Ethernet 
industrial networks. This is called industrial Ethernet and is the strongest contender The strongest contender for 


for a universal industrial network for three major reasons: a universal standard in 
. , _ industrial networks 
e The Ethernet open-standard infrastructure has allowed bridges between previ- 


ously closed areas such as controller buses, device buses, and others. 

e Maintaining a competitive edge involves rapid configuration and dataaccessin Just-in-time and Lean 
a seamless manner. Management wants “real-time” status reports. Customers, | Management strategies 
driven by methods such as Just-in-time and Lean ordering methods, demand Where the manufacturing 
order status information. Just-in-time and Lean are management strategies Materials are delivered right 
where the manufacturing materials are delivered right before they are needed. eC Tore ney. ane MEEA 

e Decreasing costs and increasing power. The cost of developing “faster, cheaper, 
and better” Ethernet networking equipment is being absorbed by the commer- 
cial equipment manufacturers. 


The major obstacle barring the industrial adoption of earlier Ethernet is that it 
used a bus topology and was nondeterministic. The fact that multiple devices could 
contend for the transmission media simultaneously (CSMA/CD) guaranteed data col- 
lisions and retransmissions. This made it impossible to guarantee a maximum worst- 
case delivery time, as required for real-time data transmission. When this was added 
to the 5 to 20 milliseconds data scan rates of many controllers, early Ethernet was just 
too slow and unreliable. 


Achieving Determinism 


Improvements have been made in Ethernet in four major areas in order to achieve de- 
terminism: network topology, bus management, speed, and redundancy. Examples of 
network topology and bus improvements include the use of switched media and us- 
ing full duplex operation to obtain determinism. The switches enable a virtual point- 
to-point Ethernet network connection between two networking devices. The direct 
(switched) connection means there is not a contention problem for the network bus. 
Speeds have increased from 10 Mbps to 100 Mbps to 1 Gbps and to 10 Gbps. The 
slower data speeds work for the factory floor networks (device level) and the higher 
data speeds are used to link the floor networks to the enterprise (information level). 
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This also permits redundancy to be built into an industrial implementation of Ether- 
net. The redundancy components are high speed when compared to commercial de- 
vices and switch in less than 250 msec. 


Topology 
Linear Network Topology The most common network topologies used in industrial Ethernet networks are lin- 
A backbone network is ear and Ethernet ring. Figure 16-4 shows the linear network topology. In this topol- 
looped to the switches that ogy, a backbone network is extended to each of the switches. The switches are used 
connect to device level to connect the overall network to the device level network equipment (for example, 
equipment PLCs). 
Ethernet Ring 
Uses a switch as the ring Note that the network backbone 
manager to provide an Nees feed loops through the switches. 
alternate data path in case Backbone 






of a failure 
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FIGURE 16-4 An example of a linear network topology. 


A big concern with this type of network is that a failed switch or cable problem 
will cause the plant equipment to become isolated from the network, and communi- 
cations will stop. This deficiency in the linear network can be overcome by adding re- 
dundancy to the Ethernet network. 

Redundancy can be added by incorporating an Ethernet ring topology. This 
type of network is not actually a true circular ring but uses a switch as the ring man- 
ager to provide an alternate path for the data to travel to each switch as illustrated in 















Figure 16-5. 
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FIGURE 16-5 An example of an Ethernet ring. 


The network backbone data feed connects through the ring manager. The data 
circulates in a clockwise direction in the network. The ring manager uses link tests to 
make sure that data can reach all switches in the immediate network. For example, 
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assume that there is a break between switch A and switch B (see Figure 16-5). The 
ring manager determines there must be a break in the line connecting switch A and B 
because it detects switch A but not switch B or C. Remember, the primary data flows 
clockwise. The ring manager switches the data flow from the backbone so that data 
now flows counterclockwise. This allows data from switch A through switch C to 
reach switch B even with the break in the primary data path. 


Switching 


Perhaps the biggest step forward in the development of industrial Ethernet has been 
the use of switches (also known as switching hubs or layer 2 switches) to isolate col- 
lision domains. These switches build and maintain address tables and can switch a 
packet from the input port to the output port in microseconds (refer back to Chapter 
4 for a review of network switches). They can be configured so that ports are subdi- 
vided into groups in which all packets received on one port of a group will only be 
transmitted to another port within the group. By overlapping these groups, one port 
can appear in several groups. This allows devices in logically functional units to be 
placed in the same group and thus further reduces collisions. 


Cabling and Components 


The network components used for the campus model are rated at commercial quality. Light Duty 
Industrial networks are much harsher on cabling and components than is the cam- Refers to areas located in 
pus/office environment. Industrial network areas are generally divided into light duty protected cabinets 
and heavy duty areas. Light duty areas are located inside protective cabinets. These 
cabinets are located either on the plant floor or in protected rooms such as motor con- Equi ; 
quipment placed in areas of 

trol centers. The cabinets located on the plant floor are protected from some environ- ho protection in an industrial 
mental conditions such as physical damage, electrical noise, and dust but are not setting 
protected from other conditions such as humidity and temperature. Cabinets located 
in motor control centers are better protected and usually air conditioned. Light duty 
components may be either commercial grade or industrial grade depending on the ap- 
plication. 

Heavy duty areas have no protection. Cabling and components are exposed to 
the plant floor environment including dust, humidity, physical damage, electrical 
noise, water, and chemicals. These components should be industrial grade. 

Ethernet components are normally available as either commercial grade or in- 
dustrial grade. The differences are shown in Table 16-1. 


Heavy Duty 


TABLE 16-1 Differences in Specifications for Commercial and 
Industrial Grade Ethernet Components 


Specification Commercial Industrial 

Temperature 0 to 40° C O to 70° C 

Shock and vibration Not tested Meets industrial standards such as IEC 68 
or NSTA Project 1 

NEC hazardous locations Unclassified Typically Class 1 Div II 

Mounting Not specified Din Rail 

Power 120VAC 120VAC or 18-24VDC with redundant 
inputs 
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Armored Cabling The UTP CAT6/5e cable used in most commercial applications is 

A nondestructible covering unsuitable for some industrial environments. It has a very low pull strength (< 25 lbs.) 
and is not crush proof. Commercial CATSe cable is adequate for light duty areas but 
not for heavy duty areas. The low pull strength makes it difficult to run in conduit, 
and running it in cable trays may crush it. The U in UTP stands for unshielded, which 
increases the noise susceptibility of the cable. Problems with shield terminations 
make STP (shielded twisted-pair) only marginally better. Armored fiber optic is 
rapidly becoming the standard in heavy duty industrial network areas. The fiber ca- 
ble is not susceptible to corrosion, and the armor on the cable means that it is pro- 
tected from being crushed. Basically, the armored fiber has a nondestructible 
covering. Following are some of the advantages of fiber: 


e Immunity to interference from manufacturing or process machinery. 

e Corrosion effects from the manufacturing or process are not an issue. 

e Safety is a big issue because fiber is a dielectric and does not conduct 
electricity. 


Connectors An important reason for moving to Ethernet components is the 
availability of cost effective COTS (commercial-off-the-shelf) components. The stan- 
dard connector for Ethernet in office/campus networks is the RJ-45, which is derived 
from telephone connectors. It is marginally adequate for office environments and un- 
suitable for both light and heavy duty areas in industrial environments. There are sev- 
eral reasons for this: 


e Waterproofing: There is not a successful, cost-effective way to waterproof 
these connectors. 

e Ruggedness: Industrial connectors are subject to multi-axis stress and to 
shock. Plastic connectors cannot handle this. 

e Vibration: Researchers have found that vibration erodes the gold plating on 
RJ-45 connectors very quickly. There are connectors available with thicker 
gold plating. 


Three groups, Woodhead Connectivity, Agilent (HP), and a consortium of 
Rockwell/Belden/Panduit/Commscope/Anixter, have developed designs for connec- 
tors based on combining the RJ-45 with an M style connector. The standard indus- 
trial Ethernet connector should come from one of these designs. 

Power Most modern field devices are loop powered. This means that power 
to the field device is provided with the same cable that provides the data (control) con- 
nection. In this case, the power to the device and the data connection occupy the same 
physical pair of wires, giving us the typical two-wire control loops found in most ap- 
plications. If Ethernet is going to move to the device level, it will have to provide 
power. The [EEE 802.3af standard has been developed to solve this problem. They 
are considering using one of the unused wire pairs in the standard CATSe cable to 
provide the loop power: 


16-4 INDUSTRIAL ETHERNET PROTOCOLS 


The objective of this section is for the reader to gain an understanding of the various 
Ethernet protocols being used in industrial Ethernet. The protocols presented are 
based on either TCP or UDP. Recall that TCP (Transport Control Protocol) is a 
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connection-oriented protocol. UDP (User Datagram Protocol) is also being used in 
industrial Ethernet and is a connectionless protocol. TCP is the dominant transport 
layer protocol used in commercial applications and also stands to dominate industrial 
Ethernet. Both protocols support the use of port numbers (refer back to Chapter 5 for 
a discussion on ports). These port numbers can be assigned, registered, or dynamic. 
Assigned numbers range from 0 to 1023 and are allocated to programs such as telnet 
and ftp. Numbers between 1024 and 49151 can be registered to specific products. An 
example of a registered port is 44818, which belongs to DeviceNet and ControlNet, 
industrial network protocols. 


Ethernet/IP 
The first protocol examined is Ethernet/IP, also called the Ethernet Industrial Pro- Ethernet/IP 
tocol. Ethernet/IP is an open network based on the following: An open networking protocol 
based on IEEE 802.3, TCP/IP, 
1. IEEE 802.3 physical and data link standard and CIP 


2. Ethernet TCP/IP protocol suite 

3. Control and Information Protocol (CIP), which is an earlier protocol used by CIP 
DeviceNet and ControlNet systems. Ethernet/IP works by inserting CIP into Control and Information 
the application layer. Protocol 


This standard is proposed by the Open DeviceNet Vendor Association (ODVA) 
and was developed by Allen Bradley as an extension of their DeviceNet device level 
protocol. It focuses on the information and control network for discrete manufactur- 
ing plants in industries such as automotive, forest products, and electronics. Ether- 
net/IP has the backing of four industrial network associations—ODVA, ControlNet 
International, the Industrial Automation Open Networking Alliance, and the Indus- 
trial Ethernet Association. 
Ethernet/IP uses CIP to encapsulate DeviceNet and ControlNet messages in- UDP/IP 
side the data field of a TCP/IP packet. TCP/IP then transmits the message to the data User Datagram 
link layer. Explicit messages in the data field contain both protocol information and Protocol/Internet Protocol 
instructions for service performance. These types of messages are commonly used for Implicit Messages 
node configuration and diagnostics. Ethernet/IP uses the simpler and faster User The data field contains only 
Datagram Protocol/Internet Protocol (UDP/IP) for real-time messages. UDP/IP han- real-time 1/0 data 
dles both multicast and implicit messages. In implicit messages, the data field con- 
tains only real-time I/O data. Because the data format is predefined, these messages 
have low overhead and short processing times. 
On the user side of the protocol, Ethernet/IP presents itself as a set (or library) Objects 
of objects. These objects are programs that enable Ethernet/IP to be configured fora Programs that enable the 
particular machine or interface, thus making the protocol very flexible and relatively | Ethernet/IP protocol to be 


easy to integrate into an existing industrial network. configured for a particular 
machine or interface 


Foundation Fieldbus High-Speed Ethernet (HSE) 


Foundation Fieldbus HSE was developed by the Fieldbus Foundation and focuses Foundation Fieldbus HSE 
on process industries such as electricity, oil, and pharmaceuticals. It includes an ex- High-speed Ethernet protocol 
isting industrial network protocol (called H1) that is used for device level communi- that focuses on support for 
cations. H1 has a modest market share and industry support. HSE supports the Process industries 
100-Mbps Ethernet protocol and uses both TCP/IP and UDP/IP. TCP/IP is used for 

unscheduled messages and for large data transfers; UDP/IP is used for alarms, sched- 

uled data transfers, and synchronizing the inputs and outputs during data transfers. 
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Profinet 


Profinet was developed by Profibus International and is an Ethernet-based protocol 
that works with the older Profibus device level protocol. The main industrial sup- 
porter of this standard is Siemens. The Profibus standard had a very good market 
share and was well accepted in European process industry. The Profinet protocol uses 
TCP/IP for reliable connectivity but also supports the option to use UDP/IP. 


Interface for Distributed Automation (IDA) 


This is an industrial Ethernet specification that is based on all levels of the automa- 
tion hierarchy. IDA promises real-time data speeds to support networks operating ro- 
botics, packaging, and motion control. IDA is a UDP/IP protocol using the RTPS 
(Real-Time Publish-Subscribe) Protocol. RTPS provides time-stamped data and con- 
trol packets. 


Manufacturing Message Specification (MMS) 


MMS is a TCP/IP protocol running over Ethernet. This protocol is a byproduct of 
General Motor’s Manufacturing Application Protocol (MAP). 


Modbus TCP 


This is an industrial protocol based on TCP/IP that has been developed to allow in- 
dustrial network connections to be made via the Internet. Modbus TCP is essentially 
the legacy industrial network protocol Modbus encapsulated in a TCP/IP packet. 


16-5 LEGACY DEVICE AND CONTROLLER LEVEL 
BUSES 


Most current buses may soon be replaced by protocols based on the Ethernet stan- 
dard. However, the following buses will almost certainly be encountered either as 
legacy systems or in new systems specified by conservative adopters. 


Open Buses 


Profibus This bus was developed in Germany in the late 1980s. It is based on the 
earlier RS485 standard and used either a 9-pin D-shell or 12 mm connectors. A baud 
rate up to 12 Mbps is used by this protocol with a message size of 244 bytes per mes- 
sage. This bus is very popular in Europe and in European equipment imported into 
the United States. Its DP and FMS formats allow it to be at the device and controller 
levels, respectively. ProfiBusDP is a polling (deterministic) network that is com- 
monly used for I/O data. ProfiBusFMS is often used to communicate among con- 
trollers, PCs, and HMI equipment. It has both twisted-pair and fiber optic capability. 

Foundation Fieldbus In the late 1990s, the Instruments, Systems and Au- 
tomation Society (ISA) developed this bus to be an open standard for mission criti- 
cal, process control, and intrinsically safe environments. This bus is not tied to a 
specific manufacturer and has multiple vendors. It is popular with users of high-end 
controllers such as the Distributive Control System (DCS) used in the process indus- 
try. It uses a scheduler in each segment of the network to guarantee message delivery, 
so issues of determinism and repeatability are solidly addressed. 
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DeviceNet This bus was developed by Allen Bradley in the mid 1990s. It is 
an open standard managed by the Open DeviceNet Vendor Association (ODVA). It 
has a software layer added to the earlier standard, CAN (controller area network). It 
is relatively slow, with a maximum data rate of 500 Kb/s, but supports extensive hand- 
shaking and message formats. The CAN technology was designed to be used in au- 
tomotive products (specifically Mercedes). Expensive and difficult to maintain 
wiring harnesses were to be replaced with networks carrying control packets to de- 
vices. The CAN technology is designed to be highly reliable. 

DeviceNet’s maximum message size of 8 bytes makes it designed for the de- 
vice and controller level. 


Proprietary Buses 


DataHighwayPlus This protocol is owned by Allen Bradley for communications 
between PLCS controllers and was dominant in the 1990s. It is billed as an industrial 
local area network. It uses twisted-pair cable (commonly called “blue hose’’) and can 
transmit up to 230 Kbps, although slower speeds are more common. It is a token- 
passing network. PCs could access the DataHighway network only through propri- 
etary cards and software. 

ModBus This bus was introduced by Modicon in the late 1970s and is still 
popular. It is a relatively slow serial network designed to support analog control data 
and discrete I/O data between devices and controllers or devices and devices, often 
using ASCII code. Because of this and a royalty-free license, it was a very open net- 
work and became popular with a great deal of third-party support. 

Modbus could either be RS-232, which is a point-to-point standard, or RS-485, 
which is a multinode standard. It could attain speeds of 1 Mbps, but data rates of 9600 
bps were more common. 

HART This standard was developed to work over standard point-to-point in- 
strumentation wiring sending two-way digital information simultaneously with the 
4—20 mA analog control signal. This allowed “smart” devices to be configured across 
the existing instrumentation wiring. It did this by sending tones representing | and O 
across the wiring, where 0 = 2.2 kHz and 1 = 1.2 kHz. Many companies, chiefly Rose- 
mont and Honeywell, began developing instruments such as pressure transmitters 
that used the HART technology. HART has since been moved to an open protocol 
supported by the HART Communications Foundation. 
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SUMMARY 


The objective of this chapter has been to introduce the reader to industrial networks, 
in particular industrial Ethernet. Industrial networks are not new. Manufacturing has 
been successfully using proprietary network protocols for many years for controlling 
the manufacturing floor. The difference now is industry wants to unite the enterprise 
under one large, highly flexible, and fully integrated network. This means that the ad- 
ministration will be networked to the information, controller, and device level net- 
works via a common Ethernet network. This also means that the manufacturing floor 
can be extended out onto the Internet. The concepts the reader should understand in- 
clude the following: 


e The key issues associated with industrial networks 

e The key characteristics of an industrial network 

e The role Ethernet is playing in industrial networks 

e The basic industrial Ethernet protocols and the legacy protocols already in use 


QUESTIONS AND PROBLEMS 


Section 16-2 


1. Explain how the network requirements for industrial/manufacturing differ from 
those for commercial networks. 
List the three major differences between industrial and commercial networks. 
What are the three hierarchical levels of an industrial network? 
At what level of an industrial network is the job control information found? 
At what level can COTS equipment be used in an industrial network? 
Which level of an industrial network is the most difficult to implement in Eth- 
ernet and why? 
7. List three common older buses used on the device level of the manufacturing 
floor. 
8. Why is response time critical at the device level? 
9. What is the purpose of controllers at the controller level? 
10. Why is determinism a major obstacle to industry adopting Ethernet at the con- 
troller level? 
11. How can a single point-of-failure be avoided in industrial networks? 
12. Why is interoperability an important issue at the device level? 


eee Pe 





Section 16-3 


13. What standard is the strongest contender for a universal industrial network? 

14. List four improvements made in Ethernet that have helped provide 
determinism. 

15. What is the big concern with a linear network topology? 

16. How does the Ethernet ring topology provide redundancy? 
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17. Can CAT6/Se twisted-pair cable be used in an industrial Ethernet network? Jus- 
tify your answer. 

18. Are commercial RJ-45 connectors suitable for use in industrial networks? Jus- 
tify your answer. 


Section 16-4 


19. What is the registered port number for DeviceNet and ControlNet? 

20. In general, how does Ethernet/IP work? Why is this important? 

21. What protocol is used for real-time messages in Ethernet/IP? 

22. What is the data rate for Foundation Fieldbus HSE, and what protocol is used 
to send unscheduled messages? 

23. Identify whether the following protocols use TCP/IP, UDP/IP, or both: 

a. Ethernet/IP 

Foundation Fieldbus HSE 

. Profinet 

IDA 

. Modbus TCP 


onana st 


Critical Thinking 


24. What command can be used in an industrial Ethernet network to determine 
whether a machine on the manufacturing floor is connected to the network? 

25. Could the IP address 10.20.250.1 be assigned to a device in an industrial net- 
work if the device must be accessible from the Internet? Justify your answer. 
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Glossary 


? the help command that can be used at any prompt 
in the command line interface for the Cisco IOS 
software 


10Base2 10 Mbps-Baseband-200 meters (185 meters) 
10GBASE-T 10 gigabit over twisted-pair copper 
absorption light interaction with the atomic structure 


of the fiber material; also involves the conversion of 
optical power to heat 


access layer where the networking devices in a 
campus LAN connect together 
access lists (ACLs) a basic form of firewall protection 


access point a transceiver used to interconnect a 
wireless and a wired LAN 


ACK acknowledgement packet 


ACR combined measurement of attenuation and 
crosstalk; a larger ACR indicates greater data capacity 


Active Directory a centralized system that automates 
the management of user data, security, and distributed 
Services 


ad hoc another term used to describe an independent 
network 


administrative distance a number assigned to a 
protocol or route to declare its reliability 


administratively down indicates that the router 
interface has been shut off by the administrator 


ADSL (asymmetric DSL) service providing up to 
1.544 Mbps from the user to the service provider 
and up to 8 Mbps back to the user from the service 
provider 


advertise the sharing of route information 


aging time the length of time a MAC address 
remains assigned to a port 


AGP Accelerated Graphics Port 
AMI alternate mark inversion 


applet small, limited-function application often 
used in control panels and on Web pages 


application layer provides support for applications, 
processes requests from hosts, and makes sure a 
connection is made to an appropriate port 


area 0 in OSPF this is the root area and is the 
backbone for the network 


areas partition of a large OSPF network into 
smaller OSPF networks 


ARIN American Registry for Internet Numbers 
armored a nondestructive covering 


ARP Address Resolution Protocol; used to map an 
IP address to its MAC address 


ARP cache temporary storage of MAC addresses 
recently contacted 


ARP reply protocol where the MAC address is 
returned 


ARP request a query asking which network 
interface has a specified IP address 


ARP table another name for the ARP cache 


ARPAnet Advanced Research Projects Agency 
network 


AS autonomous systems 


S iH 


635 








ASN autonomous systems number 


association indicates that the destination address is 
for a networking device connected to one of the 
ports on the bridge; indicates that a link has been 
established between an access point and a client 


asymmetric operation describes the modem 
operation when the data-transfer rates to and 
from the service provider differ 


ATM asynchronous transfer mode 


attenuation the amount of loss in the signal 
strength or power as the signal propagates down 
a wire or fiber strand 


AUI port a router’s 10 Mbps Ethernet port 


authenticated the server verifies that the computer 
and user are authorized to access the network 


auto-negotiation protocol used by interconnected 
electronic devices to negotiate a link speed 


autonomous system (AS) a number assigned to a 
routing protocol to define which networks exchange 
routes 


auxiliary input an alternate way to access the 
router, using a dial-in modem 


B8ZS bipolar 8 zero substitution 


backbone primary path for data traffic to and from 
destinations and sources in the campus network 


backbone main fiber distribution 


backbone cabling cabling that interconnects 
telecommunication closets, equipment rooms, and 
cabling entrances in the same building and between 
buildings 

backhoe fading splice loss introduced by repairing 
a fiber cable dug up by a backhoe 


balanced mode neither wire in the wire pairs 
connects to ground 


bandwidth the data capacity of the networking link 
baseband information is in a digital form 
bash bourne again shell 


Basic Service Set (BSS) a term used to describe an 
independent network 


beacon used to verify the integrity of a wireless link 
BGP Border Gateway Protocol 


BIOS (Basic Input Output System) contains the 
basic instructions needed by the computer to operate 
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bipolar coding successive 1s are represented by 
pulses in the opposite voltage direction 


bipolar violation the pulse is in the same voltage 
direction as the previous pulse 


boot sequence the order in which the computer 
selects a drive for loading the computer’s boot 
instructions 


BOOTP Bootstrap Protocol 

bottlenecking another term for network congestion 
bridge a networking device that uses the MAC 
address to forward data and interconnect two LANs 
bridging table list of MAC addresses and port loca- 
tions for hosts connected to the bridge ports 
broadcast transmission of data to all devices 
broadcast domain any broadcast sent out on the 
network is seen by all hosts in this domain 
broadcast storm excessive amounts of broadcasts 
brute force attack attacker uses every possible 
combination of characters for the password 

buffer temporary storage for holding data packets 
until it is time for them to be sent 


buffer overflow happens when a program tries to 
put more data into a buffer than it was configured to 
hold 


building entrance the point where the outdoor 
cabling interconnects with the internal building 
cabling 


bursty data rates can momentarily exceed the 
leased data rate of the service 


bus mastering provides a performances boost of 
the computer’s CPU bus 


bus topology the computers share the media 
(coaxial cable) for data transmission 


cable modem modem that can use the high 
bandwidth of a cable television system to deliver 
high-speed data to and from the service provider 


campus network a collection of two or more 
interconnected LANs in a limited geographic area 


CAN controller area network, used to replace 
wiring harnesses in cars 


cat Linux command used to print the file text to the 
screen 


CATS (category 5) twisted-pair cables capable of 
carrying 100 Mbps of data up to a length of 100 
meters 


en 


CATS5/e enhanced version of CAT5 


CAT¢6 the current standard in high-performance 
twistedpair cable 


CBWEFQ class-based weighted fair queuing 
CCIE Cisco Certified Internet Expert 
CCNA Cisco Certified Network Associate 
CCNP Cisco Certified Network Professional 
cd Linux command for changing directories 


chgrp command used in Linux to change group 
ownership of a file 


child a subset domain of the main tree 


chkconfig Linux command used by administrators 
to enable and disable services at boot time 


chmod command used in Linux to change permissions 
on files and directories 


chown command used in Linux to change ownership 
of a file 


chromatic dispersion broadening of a pulse due to 
different propagation rates of the spectral components 
of the light 


CIDR classless interdomain routing 


CIDR block the grouping of two or more class 
networks together; also called supernetting 


CIP Control and Information Protocol 


Cisco IOS Cisco Internet Operating System, the 
operating software used in all Cisco routers 


cladding material surrounding the core of the 
optical waveguide, which must have a lower index 
of refraction to keep the light in the core 


Class A, B, C, D, and E the five classes of IPv4 


class network address the network portion of the 
IP address based on the class of the network 


classful the IP and subnet addresses are within 
the same network 


classful addressing the network portion of a 
particular network address 


classful network same as a class network 


client computer connected to the network that 
accesses services from the server 


client/server network the server handles multiple 
requests from multiple clients for multiple services 


clusters storage area for files and directories 


CODEC encodes, compresses, and decodes the data 
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color map the specification of what wire color 
connects to what pin on the connector 


COM1, COM2, ... the computer’s serial 
communication ports 


combo terminations the interface supports multiple 
types of media connections 


command line a text entry level for commands 


command line interface (CLI) interface type used 
for inputting commands and for configuring devices 
such as routers 


committed burst information rate (CBIR) 
enables subscribers to exceed the committed infor- 
mation rate (CIR) during times of heavy traffic 


committed information rate (CIR) guaranteed 
data rate or bandwidth to be used in the frame relay 
connection 


community computer a computer that has no 
security attached to it 


configure terminal (conf t) command to enter the 
router’s terminal configuration mode 


connection oriented protocol establishes a network 
connection, manages the delivery of data, and termi- 
nates the connection 


console cable cable that connects a router’s console 
port to a computer’s serial port 


console input provides an RS-232 serial communi- 
cations link into the router 


container Windows 2003/2000 server name for a 
folder 


control data not usually tolerant of data time delivery 
but can include some control data such as alarm 
sharing, machine status, and utility systems status that 
can tolerate some variability in data time delivery 


controller level provides constant communication 
with other controllers and the device and information 
levels 


convergence the time it takes for the router to obtain 
a clear view of the routes in a network 


copy run start command for copying the running- 
configuration to the startup-configuration 


core the backbone of the network; the portion of the 
fiber strand that carries the light 


cost measure that takes into account bandwidth and 
expense 


COTS commercial off the shelf 
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country domain usually two letters, .us (United 
States) or .ca (Canada), that define the location of 
the domain server for that country 


cp Linux command to copy files 
CQ custom queuing 


cross-connected transmit and receive signal pairs are 
crossed to properly align each for data communication 


crossover cable transmit and receiver wire pairs are 
crossed 


crosstalk signal coupling in a cable 


CSMA/CA carrier sense multiple access/collision 
avoidance 


CSMA/CD the Ethernet LAN protocol, carrier 
sense multiple access with collision detection 


CSU/DSU channel service unit/data service unit 


D4 framing the original data framing used in T1 
circuits 


daemon Linux name for the server package 
data link layer provides for the flow of data 
DB-25 25-pin connector 

DB-9 9-pin connector 


DCE Data Communications Equipment (the serial 
connection responsible for clocking) 


DDR SDRAM double data-rate SDRAM 


default gateway address the IP address of the 
networking device used to forward data that needs 
to leave the LAN 


delay the time it takes a data packet to travel from 
source to destination 


delay skew measure of the difference in arrival time 
between the fastest and slowest signal in the UTP 
wire pair 

denial of service (DoS) a service is being denied to 
a computer, network, or server 


dense wave division multiplex (DWDM) incorpo- 
rates the propagation of several wavelengths in the 
1550-nm range for a single fiber 

determinism the ability of a network to have a 
guaranteed worst-case packet delivery time 
deterministic access to the network is provided at 
fixed time intervals 


device drivers interface the operating system to the 
hardware 


device level where the network interfaces to the 
manufacturing or process machinery 

DHCP Dynamic Host Configuration Protocol; IP 
addresses are assigned dynamically 

dictionary attack uses known passwords and many 
variations (upperand lowercase and combinations) 
to try to log in to your account 

DIMM dual in-line memory module 


directed broadcast the broadcast is sent to a 
specific subnet 

discrete mulitone (DMT) a multicarrier technique 
used for transporting digital data over copper 
telephone lines 

dispersion broadening of a light pulse as it 
propagates through a fiber strand 

dispersion compensating fiber acts like an 
equalizer, canceling dispersion effects and yielding 
close to zero dispersion in the 1550-nm region 
distance vector protocol a routing algorithm that 
periodically sends the entire routing table to its 
neighboring or adjacent router 

distributed feedback (DFB) laser a more stable 
laser suitable for use in DWDM systems 
distribution layer point where the individual LANs 
connect together 


DL diode laser 


dici tag the data link connection identifier assigned 
by Telco for use within the Telco cloud; the tag 
associates which PVC is coming through and where 
it is coming from 


dmesg command used to display the boot processes 
for Linux, used to identify why certain processes 
failed 


DNS domain name service 


domain controller provides authentication, stores 
directory information, and provides directory 
Services 


DRAM dynamic random access memory 
DRD RAM (RDRAM) Direct RAMBUS DRAM 
DS digital signal 


DS-0 to DS-3 common telecommunication data 
rates 


DSL digital subscriber line 


DSSS direct sequence spread spectrum 
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DTE Data Terminal Equipment 
dynamic assignment MAC addresses are assigned 
to a port when a host is connected 


dynamic routing protocols routing table is dynam- 
ically updated to account for loss or changes in 
routes or changes in data traffic 

eBGP external Border Gateway Protocol 

echo request part of the ICMP protocol that 
requests a reply from a computer 

EDO RAM extended data-out RAM 

EIA Electronics Industries Alliance 

EIA/TIA 568B the standard that defines the six 
subsystems of a structured cabling system 
EIGRP Enhanced Interior Gateway Routing 
Protocol 

EISA Extended Industry Standard Architecture 
EMI electromagnetic interference 

enable command used to enter the router’s 
privileged mode 

enterprise network term used to describe the 
network used by a large company 

entrance facilities another term for the building 
entrance 


equal level FEXT (ELFEXT) calculation obtained 
by subtracting the attenuation value from the 
far-end crosstalk 


equipment room a room set aside for complex 
electronic equipment such as the network servers 
and telephone equipment 


ESF extended superframe framing 

ethO, eth1, eth2,... the way Linux identifies the 
Ethernet interface cards 

Ethernet/IP an open networking protocol based on 
IEEE 802.3, TCP/IP, and CIP 

Ethernet, physical, hardware, or adapter address 
other names for the MAC address 

Ethernet port (E0, E1, E2, ...) naming of the 
Ethernet ports on the router 

Ethernet ring uses a switch as the ring manager to 
provide an alternate data path in case of a failure 


event a disturbance of the light propagating down 
the fiber span that results in a disturbance on the 
OTDR trace 


executable (x) permission allows the program or 
script to run 


Extended Service Set (ESS) the use of multiple 
access points to extend user mobility 


Fast Ethernet an Ethernet system operating at 100 
Mbps 

fast link pulse (FLP) carries the configuration 
information between each end of a data link 

FAT file allocation table 

FAT16 uses a 16-bit file allocation table 

FAT32 uses a 32-bit file allocation table 

FHSS frequency hopping spread spectrum 


fiber Bragg grating a short strand of modified fiber 
that changes the index of refraction and minimizes 
intersymbol interference 


fiber cross-connect optical patch panel used to 
interconnect fiber cables 


fiber, light pipe, glass synonymous terms for a 
fiber optic strand 


FIFO first in, first out 


firewall used in computer networks for protecting 
the network 


first queued describing when the data packet 
arrives 


flat network a network where the LANs share the 
same broadcast domain 


forest a collection of domains 


forward domain service translation of name to an 
IP address 


Foundation Fieldbus HSE high-speed Ethernet 
protocol that focuses on support for process 
industries 


fractional T1 indicates that only a portion of the T1 
bandwidth is being used 


frame relay cloud provides all of the required 
switches for routing the data to the destination 
network, usually provided by your local Telco 


frame relay network a packet switching network 
designed to carry data traffic over a public data 
network 


fstab the file that contains the arguments used when 
the mount command for a drive has been requested 


FTP File Transfer Protocol 
FTTB fiber to the business 
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FTTC fiber to the curb 
FTTH fiber to the home 


full channel consists of all the link elements from 
the wall plate to the hub or switch 


full duplex computer system can transmit and 
receive at the same time 


full IPv6 address all 32 hexadecimal positions 
contain a value other than 0 


fusion splicing a long-term method where two 
fibers are fused or welded together 


gateway describes the networking device that 
enables hosts in a LAN to connect to networks (and 
hosts) outside the LAN; the IP telephone system 
interface to the PSTN 


GBIC gigabit interface converter 
gigabit Ethernet 1000 Mbps Ethernet 


graded-index fiber the index of refraction is 
gradually varied with a parabolic profile 


grep Linux command used to search for strings in a 
text file 


group collection of users that can be used to set 
policy at the domain or organizational unit level 


H.323 suite of protocols that defines how voice and 
video are transported over IP networks 


half duplex the communications device can 
transmit or receive but not at the same time 


HDLC high-level data link control, a synchronous 
proprietary protocol 


hand-off when the user associates itself with 
another access point 


heavy duty equipment placed in areas of no 
protection in an industrial setting 


hello interval time between “Hello” packets 


“Hello” packets used in the OSPF protocol to 
verify that the links are still communicating 


hex hexadecimal, base 16 


hidden files files that start with a period that can 
only be viewed with the /s -la or ls -al command 


hierarchy used to divide the industrial network by 
function 


history displays the commands entered on the 
command line in Linux 


holddowns prevent bad routes from being reinstated 
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hop count the number of routers a data packet must 
pass through to reach the destination 


hopping sequence the order of frequency changes 


horizontal cabling cabling that extends out from 
the telecommunications closet into the LAN work 
area 


host enables a specific host IP address to be entered 
in the access list 


host address same as the host number 


host number the portion of the IP address that 
defines the location of the networking device con- 
nected to the network; also called the host address 


hostname the name assigned to a networking 
device; the command used to change the name of a 
Linux machine or a router 


hot standby both supplies are operating all the 
time, one online and the other operating as a backup 
ready to be switched online in case of a failure with 
the primary power supply 


HSSI high-speed serial interface 
httpd the script that starts the Web server 


httpd.conf the configuration file for the Apache 
Web server 


hub broadcasts the data it receives to all devices 
connected to its ports 


HyperTerminal Microsoft serial communications 
software package 


IANA the agency that assigns IP addresses to 
computer networks 


iBGP internal Border Gateway Protocol 
IC interconnect fibers 


ICANN Internet Corporation for Assigned Names 
and Numbers 


ICMP Internet Control Message Protocol 
IDA Interface for Distributed Automation 
IDC intermediate distribution closet 

IDE Integrated Drive Electronics 


IEEE Institute of Electrical and Electronic 
Engineers, one of the major standards-setting 
bodies for technological development 

IEEE 1394 (Firewire, i-Link) a high-speed, 
low-cost serial connection 


IETF Internet Engineering Task Force 


NSS 


ifconfig reports all of the network devices recog- IP network a network that uses IP addressing for 
nized and running on the system, listing all of the identifying devices connected to the network 


interfaces and the configuration for each ip route router configuration command for 


ifdown, ifup Linux commands used to shut down manually setting the next hop IP address 


and bring back up the network interface IP tunnel an IP packet encapsulated in another IP 


IGMP Internet Group Message Protocol packet 
IGP Interior Gateway Protocol ipconfig command used to display the computer’s 
IGRP Interior Gateway Routing Protocol IP address; reports all of the network devices 


recognized and running on the system; lists all of 


implicit messages the data field contains onl . i 
P 8 y the interfaces and configurations for each interface 


real-time I/O data 
ipconfig /all enables the MAC address information 


inbound data traffic data traffic entering the to be displayed from the command prompt 


network 


index-matching gel a jellylike substance that has HEE a ecncranon Ik 


an index of refraction much closer to glass than to IPsec IP security 

air IPv4 the IP version currently being used on the 
industrial Ethernet the strongest contender for a Internet 

universal standard in industrial networks IPv6 IP version 6 

industrial networking the process of networking IPX Novell’s Internetworking Packet Exchange 
the manufacturing floor with the enterprise networking protocol 

information level the hierarchical level of industrial ISA Industry Standard Architecture 


networks that contains mostly statistical data ISDN integrated services digital network 


infrared light light extending from 680 nm up to 
the wavelengths of the microwaves 


ISM industrial, scientific, and medical 


isolator an in-line passive device that allows optical 


intelligent (smart) devices devices that can power to flow only in one direction 


communicate directly to a controller using point- 


. . ISP Internet service provider 
to-point or multidrop wiring 


jitter produces a poorly reconstructed signal at the 


Internet layer defines the protocols used for } e oe 
receiver due to variability in data packet arrival 


addressing and routing data packets 
Just-in-time and Lean management strategies 


where the manufacturing materials are delivered 
right before they are needed 


interoperability ability for the equipment to work 
together 


interrupt request (IRQ) determines where a 
computer’s CPU should look for a hardware 
interrupt request 


Keepalive packet indicates that the Ethernet inter- 
face is connected to another networking device such 
as a hub, switch, or router 


kill [PID], kill -9 [PID] Linux commands used to 
kill a process 


L2TP Layer 2 Tunneling Protocol 


intranet an internal network that provides file 
and resource sharing but is not accessed from the 
Internet 


intrusion detection monitoring data packets 


passing through the network to catch potential or last command used to display logins to the Linux 
ongoing attacks system 

IP address unique 32-bit address that identifies on layer 2 switch an improved network technology 
which network the computer is located that provides a direct data connection for network 
IP (Internet Protocol) defines the addressing used devices in a LAN 

for identifying the source and destination addresses layer 3 network another name for a routed network 
of data packets being delivered over an IP network lease time the amount of time that a client can hold 


an IP address 
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LED light-emitting diode 
legacy in computer networking, means that the 
technology is outdated 


legacy protocol a protocol that is in place and 
cannot be replaced primarily for operational and 
economic reasons 


light duty refers to areas located in protected 
cabinets 


line of demarcation point where ownership of 
the communications equipment changes from the 
communications carrier to the user 


linear network topology the backbone network is 
looped through the switches that connect to device 
level equipment 


link point from one cable termination to another 


link integrity test protocol used to verify that a 
communication link between two Ethernet devices 
has been established 


link light indicates that the transmit and receive 
pairs are properly aligned 

link pulses sent by each of the connected devices 
via the twisted-pair cables to indicate that the link is 
up 

link state advertisement (LSA) the exchange of 
updated link state information when routes change 


link state protocol establishes a relationship with a 
neighboring router and uses route advertisements to 
build routing tables 


lo Linux symbol representing the loopback 
load network activity of a link or router 


load balancing a protocol procedure that enables 
the router to use any one of multiple data paths to 
reach the destination 


local area network (LAN) network of users that 
share computer resources in a limited area 


logical address describes the IP address location of 
the network and the address location of the host in 
the network 


logical fiber map shows how the fiber is intercon- 
nected and data is distributed throughout a campus 


long haul the transmission of data over hundreds or 
thousands of miles 


loopback the data is routed directly back to the 
source 


Is lists the basic files in the directory in Linux 
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ls -l lists file attributes in Linux 


ls -la allows you to see hidden files in addition to the 
file attributes in Linux 


MAC address a unique 6-byte address assigned by 
the vendor of the network interface card 


macrobending loss due to light breaking up and 
escaping into the cladding 


man the command used to display the online text 
manual for Linux 


managed switch allows the network administrator 
to monitor, configure, and manage select network 
features 


Management Information Base (MIB) a collection 
of standard objects that are used to obtain configura- 
tion parameters and performance data on a networking 
device 


Mbps mega (million) bits per second 

MCA Micro Channel Architecture 

mechanical splices two fibers joined together with 
an air gap, thereby requiring an index-matching gel 
to provide a good splice 

media converter used to adapt a layer 1 (physical 
layer) technology to another layer 1 technology 
mesh topology all networking devices are directly 
connected to each other 

metric a numeric measure assigned to routes for 
ranking 

microbending loss caused by very small mechanical 
deflections and stress on the fiber 

Midnight Commander a cursor-based file manager 
for Linux 

minimum ones density a pulse is intentionally sent 
in the data stream even if the data being transmitted 
is a series of all 0’s 

mkdir Linux command to make a directory 

mm multimode 

MMS Manufacturing Message Specification 
modal dispersion broadening of a pulse due to dif- 
ferent path lengths taken through the fiber by differ- 
ent modes Modbus TCP allows industrial network 
connections to be made via the Internet 

mode field diameter the actual guided optical 
power distribution, which is typically a micron or 


so larger than the core diameter; single-mode fiber 
specifications typically list the mode field diameter 


an 


more command used in Linux to display the 
contents of a text file 


mount Linux command used to access external 
drives 


Mozilla the Linux Web browser 


MT ACK message type acknowledgement, a DHCP 
ACK packet 


MT Discover message type discover, a DHCP 
Discover packet 


MT Offer message type offer, a DHCP Offer packet 


MT Request message type request, a DHCPRe- 
quest packet 


multicast messages are sent to a specific group of 
hosts on the network 


multicast address the addresses used to send a 
multicast data packet 


multicasting when one host sends data to many 
destination hosts 


multi-homed the customer has more than one 
Internet connection 


multimode fiber a fiber that supports many optical 
waveguide modes 


multiplexed the combining of data packets for 
transport 


multiport bridge another name for a layer 2 switch 
multiport repeater another name for a hub 

my Linux command for moving or renaming a file 
ncftp an ftp application for Linux 

NCP Network Control Protocol 


near-end crosstalk (NEXT) a measure of the level 
of crosstalk or signal coupling within the cable, with 
a high NEXT (dB) value being desirable 


net mask Linux name for the subnet mask 


net send command that allows a message to be sent 
over the network to a user 


net session command that displays the current users 
connected to the server 


NetBIOS computer naming convention that can be 
understood by the user 


netstat -a command used to display the ports 
currently open on a Windows operating system 


netstat -ap provides information about the network 
connections 
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netstat -r command used to obtain the routing table 
for a host PC computer 


network address another name for the layer 3 
address 


network congestion a slowdown on network data 
traffic movement 


network interface card (NIC) the electronic hard- 
ware used to interface the computer to the network 


network interface layer defines how the host 
connects to the network 


network latency the time it takes for data packets to 
travel from source to destination 


network layer provides routing decisions 


network mask 32 bits in four octets used to allow 
selected addresses to pass 


network number another name for the IP subnet; 
the portion of the IP address that defines which net- 
work the IP packet is originating from or being de- 
livered to 


network server provides access to services on the 
network 


network slowdown degraded network performance 


network start brings up the network interfaces in 
Linux 


network stop shuts down all network interfaces in 
Linux 


next hop address the IP address of the next net- 
working device that can be used to forward the data 
packet to its destination 


nmap a Linux port scanner 
no shutdown (no shut) enables a router’s interface 
NOC network operations center 


nominal velocity of propagation (NVP) some 
percentage of the velocity of light; dependent on the 
type of cable being tested 


non-Internet routable IP addresses IP addresses 
not routed on the Internet 


NS record a record that points to a name server 
NTFS New Technology File System 


numerical aperture a measure of a fiber’s ability to 
accept light 


numerics a numerical representation 
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objects programs that enable the Ethernet/IP proto- 
col to be configured for a particular machine or in- 
terface 

OC optical carrier 

OFDM orthogonal frequency division multiplexing 
openssh the secure shell application for Linux 
optical Ethernet Ethernet data running over a fiber 
link 

optical spectrum light frequencies from the 
infrared on up 

organizational unit specialized container that 
allows group policies to be set 

origanizationally unique identifier (OUI) The 
first 3 bytes of the MAC address that identifies the 
manufacturer of the network hardware 

OSI open system interconnect 

OSI model the seven layers describing network 
functions 

OSPF Open Shortest Path First routing protocol 
OSPFIGP Open Shortest Path First Interior 
Gateway Protocol 


OTDR sends a light pulse down the fiber and 
measures the reflected light, which provides a 
measure of performance for the fiber 

outbound data traffic data traffic leaving the 
network 

packet provides grouping of the information for 
transmission 

packet sequence number used to keep track of the 
order of the data packets 

packet sniffing a technique where the contents of 
data packets are watched 

packet switching packets are processed at 
switching centers and directed to the best network 
for delivery 

pair data data collected on the UTP wire pairs 


password cracking the attacker tries to guess the 
user’s password 


patch cable cabling (often twisted-pair) used to 
make the physical connection between networking 
equipment 

path determination protocol procedure used to 
determine the best route 
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payload another name for the data being 
transported 


PBX private branch exchange—the user’s own 
telephone system 


PCI Peripheral Component Interconnect 
PCM pulse code modulation 


peer computer that uses and provides resources to 
the network 


peering how an agreement is made for the exchange 
of data traffic between large and small ISPs or between 
a router and its neighbor router 


peer-to-peer network all computers in the network 
provide similar services including server functions 


permit ip any any the instruction added to the last 
line of an access list to allow all other data packets 
to enter and exit the router 


physical fiber map shows the routing of the fiber 
but also shows detail about the terrain, underground 
conduit, and entries into buildings 


physical layer describes the media that interconnects 
networking devices 


PID process ID 


ping (packet Internet groper) command used to 
test that a device on the network is reachable 


pipe Linux command used to take the output of 
one command and redirect it as an input to another 
command 


PLC programmable logic controller 
point of presence (POP) point where the customer 


connects network data traffic to the communications 
carrier 


polarization mode dispersion broadening of a 
pulse due to different propagation velocities of the 
X and Y polarization components 

port number an address used to direct data to the 
proper destination application 


ports the interface for the networking devices 


power on/off turns on/off electrical power to the 
router 


power sum NEXT (PSNEXT) measures the total 
crosstalk of all cable pairs ensuring that the cable 
can carry data traffic on all four wire pairs at the 
same time with minimal interference 

PPP Point-to-Point Protocol 


PPTP Point-to-Point Tunneling Protocol 


ON een ts SS _ EST S,FFESsSFE ESE Bx ,L OU: 


PQ priority queuing 
presentation layer protocol conversion, data trans- 
lation 


private addresses IP addresses set aside for use in 
private intranets 


privileged mode allows the router ports and routing 
features to be configured 


probing indicators of repeated attempts to make 
connections to certain machines 


Profinet Ethernet protocol that works with the older 
Profibus device level protocol 


propagation delay amount of time it takes for a 
signal to propagate from one end of the cable to the 
other 


protocol set of rules established for users to gain 
control of the network to exchange information 


ps Linux command used to list processes running on 
the machine 


PSAACREF Power Sum Alien Attenuation to 
Crosstalk Ratio 


PSACR all four wire pairs are used to obtain an 
attenuation—crosstalk ratio measurement 


PSANEXT Power Sum Alien Near-End Cross-Talk 


PSELFEXT all four wire pairs are used to obtain a 
combined ELFEXT performance measurement 


pseudorandom the number sequence appears 
random but actually repeats 


PSTN public switched telephone network—the 
telephone company 


public data network a local telephone company or 
a communications carrier 


pulse dispersion stretching of received pulse width 
because of multiple paths taken by the light 


PVCs permanent virtual connections 


pwd Linux command to print the working (current) 
directory 


QoS quality of service 
queuing provides control of the data packet transfer 


ranging technique used by cable modems to deter- 
mine the time it takes for data to travel to the cable 
head end 


RAS remote access server 


reboot command used to gracefully shut down the 
Linux machine and reboot 
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received signal level (RSL) the input signal level to 
an optical receiver 


redundancy added to networks to eliminate single 
pointsof-failure 


refractive index ratio of the speed of light in free 
space to its speed in a given material 


reliability a measure of a link’s reliability in terms 
of the amount of errors generated 


resolv.conf contains the list of DNS servers for the 
Linux machine 


return loss a measure of the ratio of power trans- 
mitted into a cable to the amount of power returned 
or reflected 


reverse DNS returns a hostname for an IP address 


reverse domain Service translation of an IP address 
to a name 


RID router ID 
RIP Routing Information Protocol 


RJ-45 the 8-pin modular connector used with CATS 
cable 


rm Linux command to delete a file 
rmdir Linux command to remove a directory 


roaming the term used to describe a users ability to 
maintain network connectivity as they move 
through the work place 


rollover cable a cable with the signals reversed at 
each end 


root access the user has the rights to make changes 
to operating and user parameters 


root servers a group of servers that exist using 
well-known IP addresses that have been programmed 
into DNS servers 


route add default gw Linux command used to 
specify the gateway address 


route flapping intermittent routes going up and 
down creating excessive LSA updates 


route print produces same displayed result as 
netstat -r 


routed network uses layer 3 addressing for 
selecting routes to forward data packets 


Router# the pound sign indicates that the user is 
in the router’s privileged EXEC mode 


Router(config)# the prompt for the router’s 
terminal configuration mode 
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Router(config-if)# indicates you are in the router’s 
interface configuration mode 


Router(config-line)# the prompt indicating you are 
in the router’s line configuration mode 


Router(config-router)# prompt indicating the 
router is in the mode to accept routing commands 


router dead interval the length of time a router 
neighbor is quiet before assuming the neighbor is 
dead 


router igrp [AS number] the router command for 
specifying IGRP 

router interface the physical connection where the 
router connects to the network 


router ospf [number] command used to enable 
OSPF routing 


router rip the router command used to enable the 
RIP routing protocol 


router uptime the amount of time that the router 
has been running 


routing loop data is forwarded back to the router 
that sent the data packets 


routing table keeps track of the routes to use for 
forwarding data to its destination; a list of the possi- 
ble networks that can be used to route the data pack- 
ets 


routing table code C router code for specifying a 
directly connected network 


routing table code S router code for static route 


rpm -e Linux command for uninstalling the 
applications 


rpm -i Linux command for installing an application 


rpm -qf searches the rpm database and returns the 
name of the file that matches the query in Linux 


RS-232 serial communications port 
RTCP Real-time Control Protocol 
RTP Real-time Protocol 


RTPS Real-Time Publish-Subscribe Protocol; 
provides time-stamped data and control packets 


RX abbreviation for “receive” 


SC, ST, FC, LC, MT-RJ typical fiber connectors 
on the market 


scattering caused by refractive index fluctuations; 
accounts for 85% of attenuation loss 


SCSI Small Computer System Interface 
SDRAM synchronous DRAM 
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segment a way to configure the network cabling 

so that the data traffic for a group of computers is 
isolated from other segments; section of a network 
separated by bridges, switches, and routers; defines 
the physical link the routers use for forwarding data 
among internetworking devices 


serial ports a router’s serial data communication 
link 

serial ports (S0, S1, S2 ,...) naming of the serial 
ports on the router 


session layer establishes, manages, and terminates 
Sessions 


shadowing switches with identical address tables 
that allow seamless transfer between the switches if 
a failure should occur 


show flash lists the details on the router’s flash 
memory 

show ip interface brief (sh ip int brief) command 
used to verify the status of the router’s interfaces 
show ip protocol (sh ip protocol) command that 
displays the routing protocol running on the router 
show ip route igrp (sh ip route igrp) command that 
displays only the IGRP routes 


show ip route (sh ip route) command that displays 
the routes and the routing address entry into the 
routing table 


show ip route static (sh ip route static) command 
that limits the routes displayed to only static 


show running-configuration (sh run) command 
that displays the router’s running-configuration 


show startup-configuration (sh start) command 
that displays the router’s startup-configuration 


show version lists the version of the Cisco IOS 
software running on the router 


shutdown -h now command used to gracefully shut 
down Linux 


signaling used to establish and terminate telephone 
calls 


signatures indicators of known attacks 
SIMM single in-line memory module 


single-mode fiber fiber cables with core diameters 
of about 7 to 10 œm; light follows a single path 


single point-of-failure a single failure of any 
device, component, cable, or software entity that 
can shut down part of the network 


an 


SIP Session Initiation Protocol 

site survey performed to determine the best loca- 
tion(s) for placing the access point(s) for providing 
maximum RF coverage for the wireless clients 

sm single mode 

SMB server message block 

SNMP Simple Network Management Protocol 


social engineering a way for an intruder to obtain 
enough information to gain access to the network 


SONET/SDH synchronous optical network/syn- 
chronous digital hierarchy; protocol standard for 
optical transmission in long-haul communication 


spit spam over internet telephony. A threat to 
quality of service in which the VoIP network can be 
saturated with unsolicited bulk messages broadcast 
over the VoIP network. 


split horizons prevents routing loops 


spoof inserting an IP address in place of an IP 
packet’s source address to make it appear that the 
packet came from another network 


SS7 the signaling technique used by the PSTN 
SSH (secure shell) an encrypted version of telnet 
SSID service set identifier 


SSIP Secure Session Initiation Protocol provides 
for end-to-end secure communications by requiring 
user authentication 


star topology the most common networking 
topology in today’s LANs where all networking 
devices connect to a central hub or switch 


stateful keeps track of the data packet flow 


static route a data traffic route that has been 
manually entered into either a router’s or 
computer’s routing table 


statistical data data that can tolerate delays in data 
delivery such as that used for quality reports, 
database information, accounting, and job control 
information 


step-index fiber fibers in which there is an abrupt 
change in the refractive index from the core to the 
cladding 


STP shielded twisted-pair 


straight-through transmit and receive signals are 
aligned 


straight-through cable the wire pairs in the cable 
connect to the same pin numbers on each end 


STS synchronous transport signals 
stubby areas do not accept routes from the Internet 


su Linux command used to become another user 
(substitute user) on the system 


subnet mask identifies the network/subnet portion 
of an IP address 


subnet, NET other terms for the segment 


supernets the grouping of two or more class 
networks together; also called CIDR blocks 


supernetting allows multiple networks to be 
specified by one subnet mask 


SVC switched virtual circuit 


switch forwards the data it receives directly to its 
destination address 


switch-56 a 56 kbps dial-up data connection 
switching hub another name for a switch 
SYN synchronizing packet 


SYN + ACK synchronizing plus acknowledgement 
packet 


T1 to T3 common telecommunication data rates 


TS68A wire color guidelines specified under the 
EIA/TIAS68B standard 


TS68B wire color guidelines specified under the 
EIA/TIA568B standard 


TCO the wall plate where the twisted-pair cable 
terminates in the room 


TCP Transport Control Protocol 


TCP/IP Transmission Control Protocol/Internet 
Protocol, part of the protocol suite used for internet- 
works such as the Internet 


TCTL Transverse Conversion Transfer Loss is the 
loss from a balanced signal at the near-end to the 
unbalanced signal at the far-end. 


TDM time division multiplexing 
Telco the local telephone company 


Telco cloud telecommunications carrier’s switched 
network used to transport data to its destination; 
also used to describe the interconnected networks 
on the Internet 


telecommunications closet location of the cabling 
termination points that includes the mechanical 
terminations and the distribution frames 
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telnet terminal emulation application for TCP/IP 
networks 


terminated describes where the cable connects to a 
jack or a patch panel 


termination required at the ends of a ThinNet net- 
work to minimize reflection problems with the data; 
point where the cable is connected to terminals in 
either a modular plug, jack, or patch panel 


ThinNet a type of coaxial cable used for connecting 
LANs configured with a bus topology 


ThinNet hub another name for a multiport repeater 
TIA Telecommunications Industry Association 


ticks measured delay time, where 1 tick is approxi- 
mately 55 ms (1/18 second) 


tie line line used to interconnect PBXs 


timestamp reproduces playback of the voice 
packets with the same time interval as they were 
recorded 


TLD top level domain 


token passing a technique where an electrical token 
circulates around a network. Possession of the token 
enables the user to gain access to the network 


token-ring hub a hub that also manages the passing 
of the token in a token-ring network 


token-ring topology a network topology configured 
in a ring that complements the token passing protocol 


topology architecture of a network 


totally stubby areas use only a default route to reach 
destinations external to the autonomous system 


TR telecommunications room 
transceiver a transmit/receive unit 


translation bridge Use to interconnect two LANs 
that are operating two different networking protocols 


transparent bridge interconnects two LANs running 
the same type of protocol 


transport layer ensures error-free packets 


transport layer protocols define the type of 
connection established between hosts and how 
acknowledgements are sent 


tree a domain 


tunable laser laser in which the fundamental 
wavelength can be shifted a few nanometers, ideal 
for traffic routing in DWDM systems 


TX abbreviation for “transmit” 


648 Glossary 


UDP User Datagram Protocol 

UDP/IP User Datagram Protocol/Internet Protocol 
umount Linux command used to unmount a drive 
unicast the packet has a fixed destination 

U-NII Unlicensed National Information Infrastructure 


up arrow used to display the previously entered 
commands stored in the Linux history buffer 


uplink port allows the connection of hub to hub or 
switch without having to use a special cable 


USB Universal Serial Bus 


user EXEC mode used by a user to check the 
router status 


user mode same as the user EXEC mode 
UTP unshielded twisted-pair 


V.44/V.34 the standard for all analog modem con- 
nections with a maximum data rate of up to 34 
kbps; V.44 provides improved data compression, 
smaller file sizes that provide faster file transfers 
and improved Web browsing 


V.92/V.90 the standard for a combination analog 
and digital modem connection with a maximum 
data rate of 56 kbps; V.92 provides a quick connect 
feature that cuts down on negotiation and handshake 
time as compared to V.90 


variable length subnet masking routes can be 
configured using different subnet masks 


variable length subnet masks (VLSMs) allow the 
use of subnet masks to better fit the needs of the 
network, thereby minimizing the waste of IP 
addresses when interconnecting subnets 


VCI virtual channel identifier 
vertical cavity surface emitting lasers (VCSELs) 


lasers with the simplicity of LEDs and the perfor- 
mance of lasers 


virtual channel connection (VCC) carriers the 
ATM cell from user to user 

virtual path connection (VPC) used to connect the 
end users 

virtual tie line simplifies the interconnection 
between the IP-PBX and the PSTN 


virus a piece of malicious computer code that when 
opened, starts a programs that attacks a computer 
and/or the network 


VLB VESA Local Bus 


OO 


VoIP voice over IP telephony 


VoIP gateway provides the proper signaling of 
digitized voice data for transport over the IP network 


VoIP relay another name for a VoIP gateway 

VPI virtual path identifier 

VPN virtual private network 

w displays the names of the users presently logged 
into the system plus provides additional details on 
each user in Linux 

war driving using wireless equipment to detect 
wireless management packets 


weighted fair queuing (WFQ) used to determine 
what data traffic gets priority for transmission 


weighted random early discard (WRED) network 
routers and switches are configured to intelligently 
discard lower-priority packets 


well-known ports ports reserved by ICANN 


WEP (wired equivalent privacy) the goal is to 
provide the same security of a wireless connection 
that a wired connection provides 


who displays the names of the users presently 
logged into the system in Linux 


wide area network (WAN) uses the telecommuni- 
cation network to interconnect sites that are geo- 
graphically distributed throughout a region, the 
country, or the world 


wild card bits used to match network IP addresses 
(A.B.C.D format) to interface IPs 


Windows 2K server another name for Microsoft 
Windows 2000 server 


winipcfg command for displaying Ethernet adapter 
information on some Windows operating systems 
wire-map a graphical or text description of the wire 
connections from pin to pin 

WLAN wireless local area network 

work area the location of the computers and 
printers, patch cables, jacks, computer adapter 
cables, and fiber jumpers 


workstation another name for the computer 


worm a type of computer virus that typically 
proliferates by itself 


WPA, WPA2 WiFi Protected Access, WiFi 
Protected Access version 2. Improvements to 
wireless security that support user authentication 


and replace WEP as the primary ways for securing 
wireless transfers 


write memory (wr m) command that saves your 
configuration changes to memory 


wu-ftpd Washington University’s ftp server 


X.25 a packet-switched protocol designed for data 
transmission over analog lines 
xDSL a generic representation of the various DSL 
technologies that are available 


zero-dispersion wavelength point where the 
dispersion is actually zero 
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6to4 Prefix, 184 ? (help) command, 207 
SPSC. See RJ-45 modular connectors 
10 Gigabit Interface Adapters. See XENPAKs 
10GBASE-T, 59 A 
AXT, 83-84 absorption, defined, 457 
signal balance, 84 Accelerated Graphics Port. See AGP 
signal transmission, 85-86 access layer (campus networks), 356 
standard, 83 access list permit ip any any command, 400 
802.11 WLANs, 414 access lists. See ACLs 
configuring, 420 access points 


access points, 422 home networks, 20 


bridges, 422 WLANs, 415, 422 


lost associations, 422 account lockout policies (network servers), configur- 


range, extending, 424 ing, 552 
signals, 423 connected users, viewing, 554 
site survey, 424-428 enabling user accounts, 554 
SSIDs, 421 locked out accounts, 553 
MAC layer, 415 messages to users, 555 
OFDM, 418-419 ACLs (access control lists), 396-398 
physical layer, 415 blocking host IP addresses example, 403 
802.11a WLANs, 420 blocking SMB data packets example, 400-401 
802.11b WLANs, 419-420 extended, 399 
802.11g WLANs, 419-420 named access list example, 401-402 
802.111 WLANs, 420 routers, applying to, 399-400 
802.11n WLANs, 419-420 standard, 399 
802.11r WLANs, 420 ACR (attenuation-crosstalk), 74, 79 
SP8C. See RJ-45 modular connectors Active Directory, 514 
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ad hoc networks. See BSS 
adapter addresses. See MAC addresses 
adapters 

home networks, 19 

PC Card, 20 

Wireless-N, 20 
adaptive cut-through switching, 137 
adding 

clients to campus networks, 363 


computers to Windows 2003/2008 server domain, 
522-526 


groups to Windows 2003/2008 server domain, 528-532 
network servers, 513 


organizational units to Windows 2003/2008 server do- 
main, 528-529, 531-532 


users to 
Linux, 561-564 
Windows 2003/2008 server domain, 526-527 
Address Resolution Protocol. See ARP 
addresses 
anycast, 184 
class network, 240 
default gateway, 196 
IP 
assigning, 15, 173, 268 
campus network assignments, 358, 360 
CIDR blocks, 181-182 
classes, 15, 170 
defined, 15 
format, 15 
gateway of last resort, 233 
groups. See private addresses 
home networks, 29-30 
host numbers, 16 
IPv4, 15 
IPv6, 182-185 
lease time, 359 
Linux configuration, 590 
name translation, 361 
network numbers, 16 
network servers, configuring, 521-522 
next hop, configuring, 231 
non-internet routable, 173 
octets, 172 
office-type LANs, 34 
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OSPF “Hello” packets, 275 
private, 173 
RAS configuration, 321 
structure, 171 
verifying, 36 
logical, 138 
MAC 
aging time, 134 
bridge tables, 126 
defined, I 1 
dynamic, 134 
filtering, 28 
OUIs, 11 
retrieving, 12-13 
samples, 14 
secure, 134 
static, 134 
viewing, 12 
multicast, 164, 184 
network, 138 
next hop, 199 
private, defined, 16 
unicast, 184 
administration commands (Linux) 
man, 577 
mount, 581-582 
ps, 579-580 
shortcuts, 583 
shutdown, 583 
shutdown -h now, 583 
su, 580 
unmount, 583 
administrative distance, 245 
administratively down, defined, 220 
ADSL (asymmetric DSL), 313 
Advanced Research Projects Agency (ARPAnet), 156 
advertising, 240 
aging time, 134 
AGP (Accelerated Graphics Port), 106-107 
Alien Crosstalk. See AXT 
American Registry for Internet Numbers. See ARIN 
AMI (alternate mark inversion), 295 


analog modem technologies, 309-310 


— ad hoc networks 


analyzing 
campus data traffic, 378 
daily, 379 
hourly, 379 
weekly, 380 
Internet data traffic 
frame size distribution, 347 
network layer host tables, 346 
network layer matrix, 345-346 
utilization/errors strip chart, 344 
unsecured data packets 
captured packets, 405-407 
router connections, 406 
telnet session packets, 407 
telnetting to routers, 405 
user verification, 406 
VoIP data packets, 497 
acknowledgement, 499, 502 
call processor message, 499 
call processors call plans, 502 
collecting data packets, 498 
IP network handshaking, 504 
NBX call processor codes, 498 
PCM voice data, 499 
test setup, 502 
anycast addresses, 184 
Apache Web service installation (Linux), 588-589 
applets, defined, 539 
application layer 
OSI model, 123 
TCP/IP, 157-158 
application servers, 512 
architectures (optical networking) 
building distribution, 470-472 
campus distribution, 472-475 
data rates, 469 
defining optical networking, 468-470 
fiber to the business, 469 
fiber to the curb, 469 
fiber to the desktop, 469 
fiber to the home, 469 
optical Ethernet, 469-470 
standards, 468 
area 0, 254 
areas (OSPF), 251 


ARIN (American Registry for Internet Numbers), 173 


armored fiber optics, 628 
ARP (Address Resolution Protocol), 39, 162 
arp -a command, 127 
ARP caches, 126 
ARP replies, 39 
ARP tables. See ARP caches 
ARPAnet (Advanced Research Projects Agency), 156 
AS (autonomous systems), 246, 339 
ASNs (AS numbers), 339 
associations, 421 
checking, 125 
WLANs, 422 
asymmetric DSL. See ADSL 
asymmetric operations, 309 
ATA connections, 107 
ATM (Asynchronous Transfer Mode), 305 
classes, 306 
connections, creating, 308 
interfaces, viewing, 308 
PVC interface, 306 
router configuration, 307 
router subinterface configuration, 307 
VCI, 306 
virtual channels, viewing, 308 
VPI, 306 
attacks (security) 
DDoS, 396 
DoS, 395-396 
firewalls, 398 
intrusions 
detecting, 404 
packet sniffing, 390 
password cracking, 389-390 
social engineering, 389 
viruses, 393 
vulnerable software, 391-393 
wireless vulnerabilities, 394 
worms, 393 
attenuation, 71-72, 457 
attenuation-crosstalk. See ACR 
attenuators, 463 
authentication, 436, 534 


authentication — 
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auto-negotiation protocol, 145 
advantages/disadvantages, 148 
FLPs, 146 
full/half duplex, 146-147 
process, 146 

autonomous systems. See AS 

available bit-rate class, 306 

AXT (Alien Crosstalk), 83-84 


B8ZS (bipolar 8 zero substitution) encoding, 296 
backbone cabling structured cabling subsystem, 52 
backbones, 251, 473 
backdoors, 392 
backhoe fading, 476 
backscatter, 432 
balanced mode, UTP, 58 
bash (bourne again shell), 566 
Basic Input Output System. See BIOS 
Basic Service Set. See BSS 
beacons, 436 
BGP (Border Gateway Protocol), 338 
configuring, 339-343 
Net-Challenge configuration, 343-344 
bin directory (Linux), 569 
binary-decimal number conversions, 165-166 
binary-hexadecimal number conversions, 170 
BIOS (Basic Input Output System), 116 
bipolar 8 zero substitution (B8ZS) encoding, 296 
bipolar coding, 296 
bipolar violations, 296 
Blocking state (STP), 378 
Bluetooth, 429 
configuring, 430-43 1 
inquiry procedure, 430 
paging procedure, 430 
piconets, 430 
boot directory (Linux), 569 
boot processes (Linux), troubleshooting, 598-600 
boot sequence 
BIOS, configuring, 116 
defined, 116 


boot services (Linux), troubleshooting, 602-603 
BOOTP (Bootstrap Protocol), 359 
Bootstrap Protocol. See BOOTP 
Border Gateway Protocol. See BGP 
bottlenecking, 59 
bourne again shell. See bash 
BPDUs (Bridge Protocol Data Units), 377 
branching devices, 463 
bridges, 124 
advantages/disadvantages, 128 
ARP caches, 126 
associations, checking, 125 
broadcasts, handling, 125 
data traffic, isolating, 126 
Ethernet LANs, 125 
MAC address entries, 126 
multiport. See layer 2 switches 
translation, 127 
transparent, 127 
wireless, 127 
WLAN configurations, 422 
bridging tables, defined, 124 
broadband connections, 17 
broadband modems/gateways, home networks, 23 
broadband wireless access (BWA), 432 
broadcast domains, 137, 195 
broadcasts 
bridges, 125 
defined, 8 
directed, 396 
storms, 126 
brute force attacks, 389 
BSS (Basic Service Set), 415-416 
buffer overflow attacks, 391 
buffers, defined, 496 
building distribution (optical networking), 470-472 
building entrance structured cabling subsystem, 52 
bursty data transmissions, 299 
bus connections 
AGP video card, 107 
ATA, 107 
Firewire, 106 
ISA, 104 
motherboard, 103-106 
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overview, 102 
PCI, 104 
USB, 105 
bus topologies, 6-8 
BWA (broadband wireless access), 432 


C 


cable modems, 23, 310 
cables 

CATS, 58 

CATS straight-through patch cables, configuring 
crimping RJ-45 plug, 71 
inserting wires into RJ-45 plug, 70 
jacket stripping, 69 
separating wire pairs, 70 

CATSe, 57 
configuring straight-through patch cables, 69-71 
four wire pairs, 61 
test examples, 88, 92-93 

CAT®6, 32, 57 
four wire pairs, 61 
terminating horizontal links, 65-68 
testing, 75 

CAT6a, 57 

CAT7, 59 

color maps, 60 

console, 201 

crossovers, 33, 64 

full channels, 71 

industrial Ethernet, 627-628 

link pulses, 34 

links, 71 

office-type LANs, 32-34 

patch 
configuring CAT5/5e straight-through, 69-71 
defined, 56 
horizontal cabling, 56 

rollover, 201 

STP, 51, 60 

straight-through, 64, 69-71 

structured 
campus hierarchical topology, 53 
EIA/TIA 568-B, 51 
horizontal cabling, 54-56 
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standards, 51 
subsystems, 52 
telecommunications architecture, 52-53 
TIA/EIA 568-A, 51 
terminated, 55 
testing, 71 
ACR, 74 
attenuation, 72 
CAT6 links, 75-82 
channel specifications, 72 
delay skew, 74 
ELFEXT, 74 
NEXT, 72 
propagation delay, 74 
PSACR, 74 
PSELFEXT, 74 
PSNEXT, 73 
return loss, 74 
ThinNet, 6 
transmit/receive pairs, aligning, 62-63 
troubleshooting 
cable stretching, 87 
CATS5e test examples, 88, 92-93 
failing to meet manufacturer specifications, 87 
installation, 6 
UTP, 51 
balanced mode, 58 
bottlenecking, 59 
categories, 58-59 
F/UTP, 84 
full duplex gigabit Ethernet support, 59 
high-performance, terminating, 60-61 
RJ-45 modular plug example, 57 
standards, 57 
wire maps, 64 
caches (ARP), 126 
CAM (Content Addressable Memory), 136 
campus area networks. See CANs 
campus networks 
data traffic analysis, 378 
daily, 379 
hourly, 379 
weekly, 380 
defined, 51, 122 
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designing 
access layer, 356 
core layer, 354-355 
data flow, 356 
distribution layer, 355 
load balancing, 357-358 
media selection, 356-357 
DNS, 361 
adding clients, 363 
hierarchy, 362 
local server administration, 363 
NS records, 362 
obtaining domain names, 363 
reverse, 364 
root servers, 362 
fiber optics distribution, 472-475 
IP assignment with DHCP, 358-360 
Power over Ethernet (PoE) 
benefits, 367 
networking hardware defined, 368 
PDs, 368 
PoE Plus, 369 
PSE, 368 
SNMP, managing with, 365-367 
structured cabling hierarchical topology, 53 
switch configuration, 370 
hostnames, 371 
line console, 372-373 
password protection, 372 
privileged mode, 371 
STP, 377-378 
VLANS 
membership assignments, 370 
Network Challenge software, 376-377 
static configuration, 373-377 
types, 369 
CAN (controller area network), 619 


CANs (campus area networks), 5 


carrier sense multiple access with collision detection. 


See CSMA/CD protocol 


carrier sense multiple access/collision avoidance. See 
CSMA/CA 


cat command (Linux), 568 
CATS3 (category 3) cables, 58 
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CATS5 (category 5) cables, configuring straight- 
through patch cables 
jackets, stripping, 69-70 
RJ-45 plugs, crimping, 71 
wire pairs, separating, 70 
CATSe (category 5 enhanced) cables, 57 
four wire pairs, 61 
straight-through patch cables, configuring 
inserting wires into RJ-45 plug, 70 
Jacket, stripping, 69 
RJ-45 plug, crimping, 71 
wire pairs, separating, 70 
test examples, 92-93 
certification report, 91 
FAIL result, 88 
PASS result, 88 
CAT6 (category 6) cables, 32, 57 
four wire pairs, 61 
horizontal link, terminating 
bend-limiting strain relief boot, 65, 68 
jacket stripping, 66 
lacing tool, 66 
RJ-45 jack and lacing tool alignment, 67 
testing 
ACR results, 79 
certification report, 82 
ELFEXT results, 80 
insertion loss, 77 
NEXT results, 78 
pair data, 76 
Power Sum NEXT results, 79 
PSACR results, 79 
PSELFTEXT results, 80 
return loss, 81 
setup, 75 
summary menu, 75 
wire-map test results, 75 
CAT¢6a (category 6a) cables, 57 
CAT7 (category 7) cables, 59 
CBIR (committed burst information rate), 299 
CBWEFQ (class-based weighted fair queuing), 497 
CCIE (Cisco Certified Internet Expert), 194 
CCNA (Cisco Certified Network Associate), 194 
CCNP (Cisco Certified Network Professional), 194 


cd command (Linux), 569 


—. campus networks 


channel service unit/data service unit. See CSU/DSU RAS, configuring, 323-325 


chgrp command (Linux), 576 VPN remote, configuring 
chkconfig command (Linux), 602 Cisco VPN Client software, 334-337 
chmod command (Linux), 573-575 Mac OS X, 333 


Windows Vista, 332 
Windows XP, 332-333 
clock rate command, 216 
clusters, defined, 114 
CNA (Cisco Network Assistant), 133 
CODEC (coder/decoder), 490 


collision domains, isolating, 136 


chown command (Linux), 576 

chromatic dispersion, 458 

CIDR blocks (classless interdomain routing), 180 
applying, 181 
example, 181-182 

CIP (Control and Information Protocol), 629 


CIR (committed information rate), 298 


Cisco 2500 series, 140-141 color maps, 60 

Cisco 2600 series, 140 combo terminations, 102 

Cisco 2800 series, 139 command line (Linux), 563 

Cisco Catalyst 2960, 133 command line interface. See CLI 
Cisco Certified Internet Expert. See CCIE command window, opening, 12 
Cisco Certified Network Associate. See CCNA commands 

Cisco Certified Network Professional. See CCNP access list permit ip any any, 400 


arp -a, 127 
clock rate, 216 


commit, 269 


Cisco IOS (Internet Operating System). See IOS 
Cisco Network Assistant. See CNA 
Cisco VPN Client software, 337 

Chile- VPN welcome menu, 334 

connections, 335 

handshake screen, 335 

installing, 334 

properties, 336 


commit and- quit, 270 

configure, Juniper router hostnames, 268 
configure terminal, 212, 371 

copy run start, 235, 303 

deny, 404 


. N edit protocols, 269 
session statistics, 336 


status, 334 
cladding, 452 


class D IP address ranges, 275 


edit routing-options static, 268 
enable, 211 

enable secret, 213, 372 
encapsulation (encap), 297 


class network addresses, 240 encapsulation frame-relay, 302 


class-based weighted fair queuing. See CBWFQ frame-relay interface-dlci, 200, 302 
classes help (?), 207 

ATM, 306 hostname, 212 

IP addresses, 15, 170 int s0/0.1 point-to-pint, 302 
classful addressing, 240 int tunnelO, 328 
classful networks, 180, 246 ip route, 231 
classless interdomain routing. See CIDR blocks ipconfig, IP address verification, 36 
CLI (command line interface), 194 ipcontig /all, MAC addresses, 12 


line ?, 213 

Linux 
chkconfig, 602 
directory operations, 569-570 
dmesg, 598 


client/server networks, defined, 511-512 
clients 


campus networks, adding to, 363 
defined, 510 
ftp, Linux, 595 
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commands = 


file operations, 571-573 
grep, 585 

httpd restart, 589 

httpd stop, 589 

ifdown, 591 

ifup, 591 

ipconfig, 590 

la system-config, 604 

last, 600 

listing files, 565-566 

man, 577 

mount, 581-582 

netstat, 603 

network start, 592 

network stop, 592 

nmap, 601 
permissions/ownership, 573-577 
pipe, 585 

ps, 579-580 

reboot, 599 

route add default gw, 592 
rpm -e, 586 

rpm -i, 586-587 

rpm -qa, 584 

rpm -qf, 585-586 
shortcuts, 583 

shutdown, 583 

shutdown -h now, 583 

su, 580 

system-config, 604 
system-config-date, 605 
system-config-firewall, 605 
system-config-network, 607 
system-config-packages, 607 


no ip directed-broadcast, 396 
no shutdown (no shut), 214 
ping 
hub-switch comparison, 131-132 
LANS, testing, 35-36 
Surveyor protocol analyzer, 39-40 
route print, 228 
router eigrp, 259 
router igrp, 246 
router ospf, 253 
router RIP, 240, 242 
routers, troubleshooting, 218-220 
set protocols, 270 
show, options, 207 
show access-list, 402 
show atm vc, 308 
show controllers, 216 
show controllers serial, 216 
show flash, 208 
show frame-relay PVC, 304 
show interfaces brief, Juniper routers, 267 
show ip interface brief, 218-220 


show ip interface brief (sh ip int brief), 214, 218-220, 
242 


show ip protocol (sh ip protocol), 242 
show ip route (sh ip route), 231-232 

show ip route igrp (sh ip route igrp), 249 
show ip route static (sh ip route static), 234 
show running config (sh run), 235, 303 
show startup config (sh start), 235 

show version, 208 

snmp community public ro, 365 

winipcfg, MAC addresses, 13 


write memory (wr m), 235 


system-config-printer, 607 
system-config-services, 609 
system-config-users, 609 
unmount, 583 

viewing file contents, 567-569 
who, 601 


net send, 554 


commercial networks versus industrial networks, 619 
commercial-off-the-shelf (COTS), 620 

commit and- quit command, 270 

commit command, 269 

committed burst information rate (CBIR), 299 
committed information rate. See CIR 


computers 


net session, 554 
netstat -a, 392 
netstat -b, 392 
netstat -r, 228 
network, 253 
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BIOS boot sequence, configuring, 116 
bus connections 

AGP video card, 107 

ATA, 107 

Firewire, 106 


— commands 


ISA, 104 
motherboard, 103-106 
overview, 102 
PCI, 104 
SCSI, 106 
USB, 105 
device drivers, 107 
Mac OS X, 110-111 
Windows Vista/XP, 108-109 
FAT, 114-115 
FAT32, 115 
memory, 112-113 
NTFS, 115 
routers 
Cisco 2500 series, 140-141 
Cisco 2600 series, 140 
Cisco 2800 series, 139 
gateways, 145 
interface, 138 
LANs, interconnecting, 138, 143-145 
segments, 145 


Windows 2003/2008 server domains, adding to, 
522-526 


Configuration BPDUs, 377 
configuration mode (Juniper routers), 266-267 
configure command, Juniper router hostnames, 268 
configure terminal (conf t) command, 212, 371 
configuring 
ACLs, 399-400 
AIM routers, 307 
BGP, 339-343 
BIOS boot sequence, 116 
Bluetooth, 430-431 
CAT5/5e straight-through patch cables 
crimping RJ-45 plugs, 71 
inserting wires into RJ-45 plug, 70 
Jacket stripping, 69 
separating wire pairs, 70 
Fast Ethernet interfaces, 214 
Frame Relay networks, 299, 305 


HyperTerminal serial communications software, 
203-204 


Juniper routers 
hostnames, 268 
IP address assignments, 268 
OSPF, 270-271 
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RIP, 269-270 
static routing, 268 
Linux networks 
DNS, 597 
etc/sysconfig/network-scripts, 594 
Ethernet cards, 590 
ftp clients, 595 
ftp servers, 596 
gateway addresses, 592 
hostnames, 597 
interface control, 591 
IP address configuration, 590 
loopbacks, 590 
shutting down/starting interfaces, 592 
SSH installations, 594-595 
viewing interface configurations, 590 
network server account lockout policies, 552 
connected users, viewing, 554 
enabling user accounts, 554 
locked out accounts, 553 
messages to users, 555 
network server IP addresses, 521-522 
network servers, 514 
next hop IP addresses, 231 
office-type LANs 
cabling, 32-34 
devices, documenting, 30 
IP addresses, 34 
star topology connections, 32 
permissions, 533 
Windows 2003, 539, 542-544 
Windows 2008, 534-536, 539 
point-to-multipoint WLANs, 438 
antenna site survey, 439 
multipoint distribution, 440 
point-to-point wireless links, 439-440 
remote installations, 442 


point-to-point Frame Relay router connections, 
302-304 


policies, 533 
Windows 2003, 539, 542-544 
Windows 2008, 534-536, 539 

RAS clients, 323-325 

RAS for Windows 2003 servers, 315-322 
enabling RAS, 315 
IP configuration, 321 
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managing multiple servers, 318 
modem configuration, 318, 320 
protocol selection, 317 


Routing and Remote Access Server Setup Wizard 
menu, 315 


Routing and Remote Access window, 315 
user accounts, 322 
router serial interfaces, 214-216 
routes 
EIGRP, 257, 259-261 
IGRP, 246-247, 249 
OSPF, 252, 254-256 
RIP, 242-244 
static routes, 234-235 
SNMP, 365-367 
Static routes, 234-235 
static VLANs, 373-377 
switches 
campus networks, 370-371 
hostnames, 371 
line console, 372-373 
password protection, 372 
privileged mode, 371 
STP, 377-378 
TFTP, 271-273 
VPNs 
remote clients, 332-337 
router-to-router connections, 327-331 
servers, 331 
Windows 2008 server, 521 
wireless networks, 27 
Z-Term serial communications software, 205 
connection oriented protocol, 158 
connections 
analog modem technologies, 309-310 
ATM, creating, 308 
broadband, 17 
bus 
AGP video card, 107 
ATA, 107 
Firewire, 106 
ISA, 104 
motherboard, 103-106 
overview, 102 
PCI, 104 
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SCSI, 106 
USB, 105 
cable modems, 310 
Cisco VPN Client software, 335 
fiber connectorization, 466-467 
Frame Relay networks 
creating, 301-302 
point-to-point router, 302-304 
high-speed, 292 
ISDN, 310-312 
last miles, 432 
layer 3 network routers, 200 
office-type LAN star topology, 32 
point-to-point, Frame Relay clouds, 300 
PVCs (permanent virtual connections), 299 
remote access servers 
client configuration, 323-325 
Windows 2003 server configuration, 315-322 
router console ports, 201-202 
switch-56, 293 
VPN 
remote clients, 332-337 
router-to-router, 326-331 
tunnel, 326 
WAN lines 
data channels, 292-293 
encoding formats, 295-298 
POP, 294 
TI framing, 294-295 
wireless networks, 27 
xDSL modems, 312-314 


connectors (industrial networks), 628 
console cables, 201 


console port connections (routers) 


console cables, 201 

connectors, 201 

HyperTerminal serial communications software, con- 
figuring, 203-204 

rollover cables, 201 

RS-232 serial communications ports, 201 

settings, 202 


Z-Term serial communications software, configuring, 
205 


constant bit-rate class, 306 
containers, defined, 524 
Content Addressable Memory. See CAM 
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contiguous networks, 241 
Control and Information Protocol. See CIP 
control data, 620 
controller area network. See CAN 
controller level (industrial network hierarchy), 621 
convergence, dynamic routing protocols, 237 
converting 
IPv4 addresses to IPv6, 184-185 
numbers 
binary to decimal, 165-166 
binary to hexadecimal, 170 
decimal to binary, 166-168 
hexadecimal, 168-170 
hexadecimal to binary, 169 
copy run start command, 235, 303 
core layer (campus networks), 354-355 
COTS (commercial-off-the-shelf), 620 
country domains, 362 
couplers, 464 
cp command (Linux), 573 
CPU utilization (industrial networks), 622 
CQ (custom queuing), 497 
cross connected devices, 33 
cross-connects 
defined, 53 
horizontal, 53 
intermediate, 52 
main, 52 
crossover cables, 64 
crossovers, 33 
crosstalk, 72 


CSMA/CA (carrier sense multiple access/collision 
avoidance), WLANs, 416 


CSMA/CD (carrier sense multiple access with collision 
detection) protocol, 10 


CSU/DSU (channel service unit/data service unit), 294 
custom queuing (CQ), 497 
cut-through switching, 137 


D 


D4 framing, 294 
daemons, 596 
data channels, WANs, 292-293 


Data Communications Equipment. See DCE 
data encapsulation, 297-298 
data flow, campus networks, 356 
data link layer, OSI model, 123 
data link negotiations, auto-negotiation protocol, 145 
advantages/disadvantages, 148 
full/half duplex, 146-147 
process, 146 
data packets 
filtering, firewalls, 397 
FTP, 185 
“Hello” packets 
capturing, 276-277 
IP address ranges, 275 
parameters, 275 
RIDs, 276 
viewing, 277 
keepalive, 218 
layer 3 network exchange, 199 
OSPF “Hello” packets, 251 
sniffing, 436 
switching, 305 
unicast, 360 
unsecured 
captured packets, 407 
capturing packets setup, 405 
protecting, 408 
router connections, 406 
telnet session packets, 407 
telnetting to routers, 405 
user verification, 406 
VoIP, analyzing, 497 
acknowledgement, 499, 502 
call processor message, 499 
call processors call plans, 502 
collecting data packets, 498 
IP network handshaking, 504 
NBX call processor codes, 498 
PCM voice data, 499 
test setup, 502 
Data Terminal Equipment. See DTE 
data traffic, campus networks 
daily, 379 
hourly, 379 
weekly, 380 


data traffic — 
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DataHighwayPlus protocol, 631 
date/time, Linux, 605 
DB-9 connectors, 201 
DB-25 connectors, 201 
DCE (Data Communications Equipment), 214 
DDoS (Distributed Denial of Service) attacks, 396 
DDR SDRAM (double-data-rate SDRAM), 113 
DDR2 SDRAM (double-data-rate two SDRAM), 113 
decimal-binary number conversions, 166-168 
default gateways 

addresses, 196 

static routing, 227 
delay skew, 74 
Denial of Service attacks. See DoS 
dense wavelength division multiplexing. See DWDM 
deny command, 404 
determinism, 6 

industrial Ethernet, 625 

industrial networks, 619 
dev directory (Linux), 569 
device drivers, 107 

Mac OS X, 110-111 

Windows Vista/XP, 108-109 
device level (industrial network hierarchy), 620-621 
Device Manager window, 108-109 
device numbers, industrial networks, 623 
Device Properties menu (Vista), 109 
DeviceNet bus, 631 
devices 

auto-negotiation, FLPs, 146 

cross connected, 33 

intelligent, 621 


interconnected link speeds. See auto-negotiation proto- 
col 


LANs, interconnecting, 129 
DFBs (distributed feedback) lasers, 462 
DHCP (Dynamic Host Configuration Protocol), 317, 
359 
IP assignment, campus networks, 358, 360 
servers, 513 
TCP packet transfers, 360-361 
DHCP Offer packets. See MT Offer 


dial-in access 
analog modem technologies, 309-310 
cable modems, 310 
ISDN, 310-312 
remote access servers 
client configuration, 323-325 
Windows 2003 server configuration, 315-322 
xDSL modems, 312-314 
dictionary attacks, 389 
digital signal (DS), 292 
digital subscriber lines. See DSL 
DIMM (dual in-line memory), 113 
diode lasers. See DLs 
Direct RAMBUS DRAM. See DRDRAM 
direct sequence spread spectrum. See DSSS 
directed broadcasts, 396 
directory operations commands (Linux) 
cd, 569 
mkdir, 570 
pwd, 570 
rmdir, 570 
Disabled state (STP), 378 
discrete multitone (DMT) modulation, 313 
dispersion 
compensation, 460-461 
dispersion compensating fiber, 461 
types, 458 
zero-dispersion wavelength, 459 
distance (industrial networks), 623 
distance vector protocols, 238-239 
Distributed Denial of Service Attacks. See DDoS 
distributed feedback lasers. See DFBs 
distribution layer (campus networks), 355 
dici tags, 300 
DLs (diode lasers), 461-462 
dmesg command (Linux), 598 
DMT (discrete multitone) modulation, 313 
DNS (Domain Name Service). See also domains; 
names 
campus networks, 361 
clients, adding, 363 
domain names, obtaining, 363 
hierarchy, 362 
local server administration, 363 
NS records, 362 
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reverse, 364 
root servers, 362 

Linux configuration, 597 

servers, 513 
domain controllers, defined, 515 
domains. See also DNS 

broadcast, 137, 195 

country, 362 

top level, 362 
DoS (Denial of Service) attacks, 395-396 
dotted-decimal format, 171 
double-data-rate SDRAM. See DDR SDRAM 
double-data-rate two SDRAM. See DDR2 SDRAM 
DRAM (dynamic random access memory), 113 
DRDRAM (Direct RAMBUS DRAM), 113 
DS (digital signal), 292 
DS-0 to DS-3 data rates, 292 
DSL (digital subscriber lines), 312 
DSL modems, home networks, 25 
DSSS (direct sequence spread spectrum), 417 
DTE (Data Terminal Equipment), 214 
DUAL finite state machine, 257 
dual in-line memory. See DIMM 


DWDM (dense wavelength division multiplexing), 451, 
462 


Dynamic Host Configuration Protocol. See DHCP 
dynamic MAC address assignments, 134 
dynamic random access memory. See DRAM 
dynamic routing protocols, 236 

convergence, 237 

distance vector, 238-239 

features, 237 

link state, 239 

load balancing, 237 

metrics, 237 

path determination, 237 
dynamic VLANs (virtual local area networks), 370 


E 


EAP (Extensible Authentication Protocol), 437 
eBGP (external BGP), 339 


ECC RAM (error-correcting code random access 
memory), 113 


entrance facilities — 


echo requests, 40 

edit protocols command, 269 

edit routing-options static command, 268 
EDO RAM (Extended data-out RAM), 113 


EF (entrance facilities). See building entrance struc- 
tured cabling subsystem 


efficiency (industrial networks), 622 
EIA (Electronic Industries Alliance), 51 
EIA/TIA 568-B, 51 

defined, 51 

structured cabling subsystems, 52 

wiring guidelines, 60 


EIGRP (Enhanced Interior Gateway Routing 
Protocol) 


DUAL finite state machine, 257 
neighbor discovery recovery, 257 
Network Challenge software, 262 
protocol dependent modules, 257 
reliable transport protocol, 257 
route configuration, 257-261 
EISA (Extended Industry Standard Architeture), 104 
electromagnetic interference. See EMI 
Electronic Industries Alliance. See EIA 
ELFEXT (Equal Level FEXT), 74 


ELTCTL (Equal Level Transverse Conversion 
Transfer Loss), 84 


email servers, 512 
EMI (electromagnetic interference), 60 
enable command, 211 
enable secret command, 213, 372 
encapsulation (encap) command, 297 
encapsulation frame-relay command, 302 
encoding 
multilevel, 85 
WAN line connections 
AMI, 295 
B8ZS, 296 
data encapsulation, 297-298 
encryption, home networks, 28 
endpoint PSE, 368 


Enhanced Interior Gateway Routing Protocol. See 
EIGRP 


Enterprise networks, defined, 143 


entrance facilities (EF). See building entrance struc- 
tured cabling subsystem 
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Equal Level FEXT. See ELFEXT 
Equal Level Transverse Conversion Transfer Loss. See 
ELTCTL 
ER (equipment room) structured cabling subsystem, 
52 
error thresholds, 137 
error-correcting code random access memory. See 
ECC RAM 
ESF (extended superframe framing), 295 
ESS (Extended Service Set), 416 
etc directory (Linux), 569 
Ethernet 
10GBASE-T 
AXT, 83-84 
signal balance, 84 
signal transmission, 85-86 
standard, 83 
bridges, 125 
CSMA/CD protocol, 10 
Fast Ethernet, 59, 214 
full duplex gigabit support, 59 
gigabit, 59 
industrial 
cabling, 627-628 
components, 627-628 
determinism, 625 
protocols, 628-630 
switching, 627 
topologies, 626-627 
IP addresses 
assigning, 15 
classes, 15 
format, 15 
groups. See private addresses 
host numbers, 16 
IPv4, 15 
network numbers, 16 
Linux Ethernet cards, 590 
MAC addresses, 11 
retrieving, 12-13 
samples, 14 
viewing, 12 
optical, 469-470 
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packets, 10-11 
PoE 

benefits, 367 

campus networks, 367-369 

networking hardware defined, 368 

PDs, 368 

PoE Plus, 369 

PSE, 368 
Ethernet addresses. See MAC addresses 
Ethernet rings, 626 
Ethernet/IP protocol, 629 
events, 481 
executable (x) permission (Linux), 575 
extended ACLs, 399 
Extended data-out RAM. See EDO RAM 
Extended Industry Standard Architecture. See EISA 
Extended Service Set. See ESS 
extended superframe framing. See ESF 
Extensible Authentication Protocol. See EAP 
external BGP. See eBGP 


F 


F/UTP (foil over twisted-pair cabling), 84 
far-end crosstalk. See FEXT 
fast link pulses. See FLPs 
fast-forward switching, 137 
FastEthernet, 59 

interface configuration, 214 

port naming, 143 
FAT (file allocation table), 114-115 
FAT32, 115 
fax servers, 513 
FC fiber connectors, 466 
FEXT (far-end crosstalk), 74 
FHSS (frequency hopping spread spectrum), 417 
fiber Bragg grating, 461 
fiber cross-connects, 471 
fiber optic networks, wavelengths, 452 
fiber optics 

advantages, 450 

architectures 

building distribution, 470-472 
campus distribution, 472-475 


E Eee 


data rates, 469 
defining optical networking, 468-470 
fiber to the business, 469 
fiber to the curb, 469 
fiber to the desktop, 469 
fiber to the home, 469 
optical Ethernet, 469-470 
standards, 468 
armored, 628 
attenuators, 463, 478 
branching devices, 463 
cable loss example, 478 
cable losses, 476 
color code for 12 fibers in a bundle, 474 
components, 449 
connections and splicing, 465-466 
connector losses, 476 
connectorization, 466-467 
construction, 452 
couplers, 464 
designing, 475-478 
diode lasers, 461 
distance-limiting parameters 
attenuation, 457 
dispersion, 458-460 
dispersion compensation, 460-461 
distributed feedback lasers, 462 
DLs versus LEDs, 462 
environments, 475 
extra losses, 476 
extra margins, 478 
fiber strands, 453 
fibers, 463 
graded-index fibers, 454-455 
isolators, 463 
LEDs, 461 
light detectors, 464 
light reflection, 451 
light refraction, 451-452 
maintenance margins, 476 
mode field diameter, 456 
multimode fibers, 453 
numerical aperture, 453 
operational margins, 476 
optical fiber types, 453-454 
optical-line amplifiers, 464 


receive signal power, 476 
receiver sensitivity, 477 
safety, 479-480 
single-mode fibers, 455-457 
single-mode/multimode, compared, 456 
spectrum notation, 451 
splice losses, 476 
splitters, 463 
transmitter power output, 476 
troubleshooting, 481 
tunable lasers, 462 
types of fiber, 456 
vertical cavity emitting lasers, 462 
wavelength division multiplexers, 464 
fiber to the business (FTTB), 469 
fiber to the curb. See FTTC 
fiber to the desktop. See FTTD 
fiber to the home. See FTTH 
fibers, 463 
fieldbus protocols, 618 
FIFO (first in, first out), 496 
file allocation table. See FAT 
file structure (Linux) 
directory operations, 569-570 
cd, 569 
mkdir, 570 
pwd, 570 
rmdir, 570 
file operation commands 
Cp, 73 
my, 572 
rm, 571 
listing files 
file permissions block attributes, 566 
install.log file attributes, 566 
Is, 565 
ls -l, 565-566 
ls -la, 566-567 
permissions/ownership, 577 
chgerp, 576 
chmod, 573-575 
chown, 576 
viewing file contents, 569 
cat, 568 
more, 567 
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file system formats 
FAT, 114-115 
FAT32, 115 
NTFS, 115 
File Transfer Protocol. See FTP 
filtering 
MAC addresses, 28 
packets, firewalls, 397 
traffic, 354 
Finisar Surveyor Demo protocol analyzer, 37 
installing, 38 
packets, captured, 38-42 
pinging computers, 39-40 
Finisar-Shomiti utilization/errors strip chart, 344 
firewalls, 396, 513 
ACLs, 398 
applying to routers, 399-400 
blocking host IP addresses example, 403 
blocking SMB data packets example, 400-401 
extended, 399 
named access list example, 401-402 
standard, 399 
attack prevention, 398 
defined, 28 
home networks, 28 
Linux, 605 
packet filtering, 397 
proxy servers, 397 
stateful, 397 
Firewire connections, 106 
first in, first out. See FIFO 
flat networks, defined, 195 
flooding, 137 
FLPs (fast link pulses), 146 
flyers, 456 
foil over twisted-pair cabling. See F/UTP 
forests, defined, 516 
formatting 
file systems 
FAT, 114-115 
FAT32, 115 
NTFS, 115 
IP addresses, 15 
IPv6 addresses, 183 
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WAN line data encoding 
AMI, 295 
B9OZS, 296 
data encapsulation, 297-298 
forward domain name service, 361 
forwarding frames, 137 
Forwarding state (STP), 378 
Foundation Fieldbus, 630 
Foundation Fieldbus HSE protocol, 629 
fractional T1 data rates, 293 
fragment-collisions, 137 
fragment-free switching, 137 
Frame Relay clouds, 299 
Frame Relay networks, 298 
configuring, 299, 305 
connections, creating, 301-302 
point-to-point connections, 300-304 
PVCs, 300 
subinterfaces, 300 
Frame Relay PVCs, 299 
frame-relay interface-dlci 200 command, 302 
frames, forwarding, 137 
frequency hopping spread spectrum. See FHSS 
frequency of operation (RFID), 435 
fstab file (Linux), 581 
FTP (File Transfer Protocol), 185 
clients, Linux, 595 
data packets, 185 
servers, 513, 596 
FTTB (fiber to the business), 469 
FTTC (fiber to the curb), 469 
FTTD (fiber to the desktop), 469 
FTTH (fiber to the home), 469 
full channels, cables, 71 
full duplex, 59, 146-147 
full duplex gigabit Ethernet support, 59 
full IPv6 addresses, 182 
fusion splicing, 465 
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gateway of last resort, 233 
gateways, 145 
default, static routing, 227 
defined, 145 


— file system formats 


layer 3 networks, 197 
VoIP, 488, 492 
GBICs (Gigabit Interface Converters), 471 
gigabit Ethernet, 59 
glass. See fibers 
graded-index fibers, 454-455 
grep command (Linux), 585 
grouping IP addresses. See private addresses 


groups, adding to Windows 2003/2008 server domains, 
528-532 


GUI window (Linux), 561 


H.323 protocols, 489 
half duplex, 146-147 
hand-offs, 416 
hardware addresses. See MAC addresses 
HART bus, 631 
HCs (horizontal cross-connects), 53 
HDLC (high-level data link control), 296 
heavy duty industrial network areas, 627 
“Hello” packets, 251 
capturing, 276-277 
Hello intervals, 275 
IP address ranges, 275 
parameters, 275 
RIDs, 276 
viewing, 277 
help (?) command, 207 
hexadecimal numbers, 168-170 
HF (high-frequency), 435 
hierarchies 
DNS, 362 
industrial networks, 619, 622 
controller level, 621 
device level, 620-621 
information level, 620 
high-frequency (HF), 435 
high-level data link control. See HDLC 
high-speed connections, 292 
high-speed serial interfaces. See HSSIs 
history command (Linux), 583 
holddowns, 245 
home directory (Linux), 569 


home networks 
appearance, 25 
costs, 25 
data speed, 25 
equipment, 17 
access points, 20 
broadband modems/gateways, 23 
cable modems, 23 
DSL modems, 25 
hubs, 18 
network adapters, 19 
routers, 20 
switches, 19 
wireless routers, 21 
home access, 26 
implementation ease, 25 
IP addressing, 29-30 
planning, 25 
public access, 26 
routers, 17 
security, 27-28 
troubleshooting, 26 
wired, advantages/disadvantages of, 17 
wireless 
advantages, 17 
configuring, 27 
connections, 27 
hotspots, 27 
range extenders, 27 
routers, 17 
standards, 17 
Wi-Fi Alliance, 17 
hopping sequences, 417 
horizontal cabling, 54 
patch cables, 56 
structured cabling subsystem, 52 
terminated, 55 
horizontal cross-connects. See HCs 
host numbers, 16 
hostname command, 212 
hostnames 
Juniper router configuration, 268 
Linux configuration, 597 
routers, 212 
switch configuration, 371 
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hosts 

defined, 402 

LANs, interconnecting, 129 
hot standby configurations, 623 
hotspots, defined, 27 
HSSIs (high-speed serial interfaces), 292 
httpd restart command (Linux), 589 
httpd script, 588 
httpd stop command (Linux), 589 
httpd.conf file (Linux), 589 
hubs 

broadcasting, 8 

defined, 8 

home networks, 18 

link lights, 33 

switches, compared, 130-132 
hybrid echo cancellation circuits, 85 


HyperTerminal serial communications software, con- 
figuring, 203-204 


I 


IANA (Internet Assigned Numbers Authority), 15 
IANA website, 15 
iBGP (internal BGP), 339 


ICANN (Internet Corporation for Assigned Names 
and Numbers), 157 


ICMP (Internet Control Message Protocol), 35, 163 
ICs (Interconnect Fibers), 471 
ICs (intermediate cross-connects), 52 


IDA (Interface for Distributed Automation) protocol, 
630 


IDCs (Intermediate Distribution Closets), 471 
IDE (Integrated Drive Electronics), 105 


IEEE (institute of Electrical and Electronics 
Engineers), 6 


IEEE 1394, 105 


IEEE OUI and company ID assignment database web- 
site, 14 


IETF (Internet Engineering Task Force), 250 
ifdown command (Linux), 591 

ifup command (Linux), 591 

IGMP (Internet Group Message Protocol), 164 
IGP (Interior Gateway Protocol), 277 
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IGRP (Interior Gateway Routing Protocol) 
administrative distance, 245 
autonomous systems, 246 
classful networks, 246 
enabling, 246 
enhanced. See EIGRP 
holddowns, 245 
metrics, 245 
Network Challenge software, 250 
OSPF, compared, 251 
routes, configuring, 246-249 
split horizons, 245 

implicit messages, 629 

inbound data traffic, 344 

index-matching gel, 466 

industrial Ethernet 
cabling, 627-628 
components, 627-628 
determinism, 625 
protocols, 628 

Ethernet/IP, 629 
Foundation Fieldbus HSE, 629 
IDA, 630 
MMS, 630 
Modbus TCP, 630 
Profinet, 630 
switching, 627 
topologies, 626-627 

industrial networks 
characteristics, 619 
commercial networks, compared, 619 
determinism, 619 
distance/number of devices, 623 
efficiency, 622 
Ethernet 

cabling, 627-628 
components, 627-628 
determinism, 625 
protocols, 628-630 
switching, 627 
topologies, 626-627 
hierarchy, 619, 622 
controller level, 621 
device level, 620-621 


information level, 620 
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interoperability, 623-624 

message length, 624 

open buses, 630-631 

open industrial networking standard, 618 

overview, 618-619 

proprietary buses, 631 

redundancy, 619 

timing considerations, 622 

topology/redundancy, 623 

vendor support, 625 
industrial, scientific, and medical (ISM), 417 
Industry Standard Architecture. See ISA 
information level (industrial network hierarchy), 620 
information servers, 512 
infrared lights, defined, 452 
input ports, 33 
inquiry procedure (Bluetooth), 430 
insertion loss. See attenuation 
install.log file attributes (Linux), 566 
installing 

cables, troubleshooting, 86 

Cisco VPN Client software, 334 

network servers, 514 

SSH, 594-595 

Surveyor protocol analyzer, 38 


Institute of Electrical and Electronics Engineers. See 
IEEE 


int s0/0.1 point-to-point command, 302 
int tunnel0 command, 328 
Integrated Drive Electronics. See IDE 
Integrated Services Digital Network. See ISDN 
intelligent devices, 621 
Interconnect Fibers. See ICs 
interconnecting LANs 

bridges, 124-128 

layer 3 networks, 196 

OSI model, 122-124 

routers, 138, 143-145 

switches, 128-129 


Interface for Distributed Automation. See IDA proto- 
col 


Interior Gateway Protocol. See IGP 

Interior Gateway Routing Protocol. See IGRP 
intermediate cross-connects. See ICs 
Intermediate Distribution Closets. See IDCs 


internal BGP. See iBGP 

Internal Ethernet interface, 267 

Internet Assigned Numbers Authority. See IANA 
Internet Control Message Protocol. See ICMP 


Internet Corporation for Assigned Names and 
Numbers. See ICANN 


Internet data traffic, analyzing 
frame size distribution, 347 
network layer host tables, 346 
network layer matrix, 345-346 
utilization/errors strip chart, 344 
Internet Engineering Task Force. See IETF 
Internet Group Message Protocol. See IGMP 
Internet layer (TCP/IP) 
ARP, 162 
ICMP, 163 
IGMP, 164 
IP, 162 
Internet Operating System. See IOS 
Internet Protocol. See IP 
Internet routing, 338 
autonomous systems, 339 
BGP, configuring, 339-343 
Net-Challenge BGP configuration, 343-344 
Internet Service Providers. See ISPs 
Internetworking Packet Exchange. See IPX 
interoperability, 621-624 
Interrupt Request. See IRQ 
intranets, defined, 16 
intrusions (security) 
detecting, 404 
packet sniffing, 390 
password cracking, 389-390 
social engineering, 389 
viruses, 393 
vulnerable software, 391-393 
wireless vulnerabilities, 394 
worms, 393 
inverse mask bits. See wild card bits 
IOS (Internet Operating System), 194 
console connection confirmation, 206 
help command, 207 
show command options, 207 


show flash command, 208 


IOS 
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show version command, 208 
User EXEC mode, entering, 206 
IP (Internet Protocol), 162 
addressing 
assigning, 15, 173 
campus network assignments, 358-360 
CIDR blocks, 181-182 
classes, 15, 170 
defined, 15 
experimental ranges, 275 
format, 15 
gateway of last resort, 233 
groups. See private addresses 
home networks, 29-30 
host numbers, 16 
IPv4, 15 
IP v6, 182-185 
Juniper interface assignments, 268 
lease time, 359 
Linux configuration, 590 
name translation, 361 
network numbers, 16 
network server configuration, 521-522 
next hop configuration, 231 
non-internet routable, 173 
octets, 172 
office-type LANs configuration, 34 
OSPF “Hello” packets, 275 
private, 173 
RAS configuration, 321 
structure, 171 
verifying, 36 
internetwork, defined, 16 
security. See [Psec 
telephony. See VoIP 
tunnels, 325 
ip route command, 231 
ipconfig /all command, MAC addresses, 12 
ipconfig command 
IP address verification, 36 
Linux, 590 
IPng. See IPv6 
IPsec (IP security), 334, 390 
IPv4 (IP version 4) addressing, 15 
assigning, 173 
classes, 170 
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octets, 172 

private IP addresses, 173 

Structure, 171 
IPv6 (IP version 6) addressing 

format, 183 

full, 182 

IPv4 conversions, 183-185 

types, 184 
IPX (Internetworking Packet Exchange), 345 
IRQ (Interrupt Request), 106 
ISA (Industry Standard Architecture), 104 
ISDN (Integrated Services Digital Network), 310, 312 
ISM (industrial, scientific, and medical), 417 
isolating collision domains, 136 
isolators, 463 


ISPs (Internet Service Providers), 16 


J 


jitter, VoIP, 495-496 
Juniper routers 
configuration mode, 266-267 
hostname configuration, 268 
interfaces 
assigning IP addresses, 268 
types, 266 
viewing, 267-268 
JUNOS CLI User Guide website, 271 
operating system (JUNOS), 262 
operational mode 
command completion, 264 
help command (?), 263 
{master} mode, 263 
network connectivity, 266 
PICs, 266 
prompts, 263 
router configuration, viewing, 265 
routing engines, 265 
version information, 264 
OSPF configuration, 270-271 
RIP configuration, 269-270 
static route configuration, 268 
JUNOS (Juniper router operating system), 262 
configuration mode, 266-267 
hostname configuration, 268 
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interfaces, viewing, 267-268 
IP addresses, assigning to interfaces, 268 
JUNOS CLI User Guide website, 271 
operational mode 
command completion, 264 
help command (?), 263 
{master mode}, 263 
network connectivity, 266 
PICs, 266 
prompts, 263 
router configuration, viewing, 265 
routing engines, 265 
version information, 264 
OSPF configuration, 270-271 
RIP configuration, 269-270 
static route configuration, 268 
just-in-time strategies, 625 


keepalive packets, 218 
kill/kill -9 commands (Linux), 580 


Konqueror program (Linux), 583 


L2TP (Layer 2 Tunneling Protocol), 331 
LANs (local area networks) 
campus 
access layer, 356 
core layer, 354-355 
data flow, 356 
data traffic analysis, 378-380 


defined, 5 
Ethernet, 10 
bridges, 125 
CSMA/CD protocol, 10 
industrial Ethernet, 625-630 
IP addresses, 15-16 
MAC addresses. See Ethernet; MAC addresses 
optical, 469-470 
packets, 10-11 
fiber optics, 475 
interconnecting 
bridges, 124-128 
layer 3 networks, 196 
OSI model, 122-124 
routers, 138, 143-145 
switches, 128-129 
IP addresses, verifying, 36 
office-type 
cabling, 32-34 
devices, documenting, 30 
IP addresses, 34 
star topology connections, 32 
sizes, 194 
testing, 35-36 
topologies, 5 
bus, 6-8 
mesh, 9 
star, 8 
token-ring, 6 
VLANs 
dynamic, 370 
membership assignments, 370 
static. See static VLANs 


daily, 379 types, 369 
distribution layer, 355 last command (Linux), 600 
DNS, 361-364 last miles, 432 
hourly, 379 l 
atency 
IP assignment with DHCP, 358-360 wes 137 
load balancing, 357-358 VoIP dpe 


managing with SNMP, 365-367 

media selection, 356-357 

Power over Ethernet (PoE), 367-369 
static VLAN configuration, 373-377 
switch configuration, 370-373, 377-378 


VLANs, 369-370 
weekly, 380 data packet exchange, 199 


layer 2 switches, 128 
Layer 2 Tunneling Protocol. See L2ZTP 
layer 3 networks, 195, 201 
components, 200 
data flow to/from gateways, 197 
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layer 3 networks „— 


default gateway addresses, 196 
finding destination networks with subnet masks, 198 
LANs, interconnecting, 196 
next hop addresses, 199 
router connections, 200 
segments, 199 
layers 
campus networks 
access, 356 
core, 354-355 
distribution, 355 
OSI model, 123 
TCP/IP, 156 
application, 157-158 
Internet, 162-164 
network interface, 164 
transport, 158-162 
LC fiber connectors, 466 
LCL (Longitudinal Conversion Loss), 84 
lean strategies, 625 
Learning state (STP), 378 
lease time, 359 
LEDs (light-emitting diodes), 461-462 
legacy protocols, 624 
LF (low-frequency), 435 
lib directory (Linux), 569 
light detectors, 464 
light duty industrial network areas, 627 
light pipes. See fibers 
light reflection, 451 
light refraction, 451-452 
light-emitting diodes. See LEDs 
line ? command, 213 
line connections, WANs 
data channels, 292-293 
encoding formats, 295-298 
POP, 294 
T1 framing, 294-295 
line of demarcation, 294 
linear network topology, industrial Ethernet, 626 
link integrity tests, 33 
link lights, 33 
link pulses, 34 


link state advertisements. See LSAs 
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link state protocols, 239 
links, cables, 71 


Linux 


administration commands 
man, 577 
mount, 581-582 
ps, 579-580 
shortcuts, 583 
shutdown, 583 
shutdown -h now, 583 
su, 580 
unmount, 583 
application management 
Apache Web service installation, 588-589 
file searches, 585-586 
installed applications, viewing, 584 
installing Red Hat applications, 586-587 
Mozilla, 588 
RPM man page, 584 
uninstalling telnet applications, 586 
bash, 566 
command line, 563 
directories, 569 
file structure 
directory operations, 569-570 
file operations, 571-573 
listing files, 565-566 
permissions/ownership, 573-577 
viewing file contents, 567-569 
fstab file, 581 
Konqueror, 583 
logging on, 560-561 
main GUI window, 561 
managing, 604 
net masks, 590 
network configuration 
DNS, 597 
etc/sysconfignetwork-scripts, 594 
Ethernet cards, 590 
ftp clients, 595 
ftp servers, 596 
gateway addresses, 592 
hostnames, 597 
interface control, 591 
IP address configuration, 590 
loopbacks, 590 
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shutting down/starting interfaces, 592 
SSH installations, 594-595 
viewing interface configurations, 590 
root access, 560 
system config tools 
date/time, 605 
firewalls, 605 
network menu, 607 
printers, 607 
services, 609 
software management, 607 
users, 609 
viewing, 604 
troubleshooting 
boot processes, 598-600 
boot services, 602-603 
security, 601 
users, 600-601 
users, adding, 561-563 
Create New User window, 562 
logout option, 564 
Red Hat User Manager window, 562 
website, 565 
Listening state (STP), 378 
listing files commands (Linux) 
file permissions block attributes, 566 
install.log file attributes, 566 
Is, 565 
Is -1, 565-566 
Is -la, 566-567 
lo (loopback), 590 
load balancing 
campus networks, 357-358 
dynamic routing protocols, 237 
per-destination, 358 
per-packet, 358 
local area networks. See LANs 
logical addresses, 138 
logical fiber maps, 472-473 
long haul applications, 456 
long-haul fiber optic systems, 475 
Longitudinal Conversion Loss. See LCL 
loopbacks 
defined, 228 
Linux, 590 


lost+found directory (Linux), 569 
low-frequency (LF), 435 

Is command (Linux), 565 

Is -1 command (Linux), 565-566 

Is -la command (Linux), 566-567 
LSAs (link state advertisements), 251 


M 


MAC addresses (media acess control) 
aging time, 134 
bridge tables, 126 
defined, 11 
dynamic, 134 
filtering, 28 
OUIs, 11 
retrieving, 12-13 
samples, 14 
secure, 134 
static, 134 
viewing, 12 
Mac OS X 
device drivers, 110-111 
memory requirements, 112 
RAS client configuration, 325 
VPN client configuration, 333 


Z-Term serial communications software configuration, 
205 


macrobending, 457 
main cross-connects. See MCs 
man command (Linux), 577 
managed switches 
aging time, 134 
benefits, 136 
broadcast domains, 137 
CAM, 136 
Cisco Catalyst 2960, 133 
flooding, 137 
frames, forwarding, 137 
IP addresses, configuring, 136 
isolating the collision domains, 136 
MAC address assignments, 134 
Management Ethernet interface, 266 


management information base. See MIB 
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managing 
campus networks 
Power over Ethernet (PoE), 367-369 
SNMP, 365-367 
Linux applications, 584 
Apache Web service installation, 588-589 
file searches, 585-586 
installed applications, viewing, 584 
installing Red Hat applications, 586-587 
Mozilla, 588 
RPM man page, 584 
system config tools, 604-609 
uninstalling telnet applications, 586 
MANSs (metropolitan area networks), 5 
manufacturer specifications for cables, 87 
Manufacturing Message Specification. See MMS 
masks (subnet) 
8 subnet division example, 177-178 
binary/decimal equivalents, 176 
CIDR notation, 180 
creating, 173-175 
prefix length notation, 180 
router-to-router link example, 179-180 
{master} mode (JUNOS), 263 
Mbps (megabits per second), 32 
MCs (main cross-connects), 52 
mechanical splices, 466 
media access control. See MAC addresses 
megabits per second. See Mbps 
membership, VLANs, 370 
memory 
amount installed, verifying, 113 
Operating system requirements, 112 
types, 113 
mesh topologies, LANs, 9 
message length (industrial networks), 624 
message overhead (industrial networks), 622 
message quantity (industrial networks), 622 
message type ACK. See MT ACK 
message type discover. See MT Discover 
message type request. See MT Request 


messages (multicast), defined, 129 
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metrics 

dynamic routing protocols, 237 

IGRP, 245 
metropolitan area networks. See MANs 
MIB (management information base), 364 
microbending, 457 
midspan PSE, 368 
MIMO (Multiple Input Multiple Output), 419 
minimum ones density, 296 
mkdir command (Linux), 570 
mm (multimode) fibers, 473 
MMS (Manufacutring Message Specification), 630 
mnt directory (Linux), 569 
modal dispersion, 458 
ModBus, 631 
Modbus TCP protocol, 630 
mode field diameter (fibers), 456 
modems 

broadband, 23 

cable, 23, 310 

DSL, 25 

RAS configuration, 318-320 

xDSL, 312-314 
more command (Linux), 567 
motherboard bus connections, 103-106 
mount command (Linux), 581-582 
Mozilla, 588 
MT ACK (message type ACK), 361 
MT Discover (message type discover), 361 
MT Offer (DHCP Offer packets), 361 
MT Request (message type request), 361 
MT-RJ fiber connectors, 466 
multi-homed users, 338 
multicast addresses, 164, 184 
multicast messages, defined, 129 
multilayer switches, 137-138 
multilevel encoding, 85 
multimode (mm) fibers, 453, 473 
Multiple Input Multiple Output. See MIMO 
multiplexing, 293 
multiport bridges. See layer 2 switches 


multiport repeaters. See hubs 
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mv command (Linux), 572 

My Network Places connection 
Windows 2000, 550-551 
Windows XP, 546-549 


N 


name server records. See NS records 
names. See also DNS 
FastEthernet ports, 143 
hostnames 
Juniper router configuration, 268 
Linux configuration, 597 
routers, 212 
switch configuration, 371 
IP address translation, 361 
serial ports, 143 
nanometers (nm), 451 
NAT (Network Address Translation), 29 
neftp (Linux), 595 
NCP (network control protocol), 156 
near end crosstalk. See NEXT 
near-end testing, 72 
neighbor discovery recovery (EIGRP), 257 
net masks, 590 
net send command, 554 
net session commmand, 554 
Net-Challenge software 
BGP configuration, 343-344 
router configuration privileged EXEC mode, 216-217 
router configuration User EXEC mode, 209-211 
NetBIOS, defined, 517 
netstat command (Linux), 603 
netstat -a command, 392 
netstat -b command, 392 
netstat -r command, 228 
Network,’ 546 
network adapters, home networks, 19 
Network Address Translation. See NAT 
network addresses, 138 
Network Challenge software 
EIGRP, 262 
Frame Relay networks, 305 


IGRP, 250 

OSPF, 256-257 

Static routes, 236 

static VLANs, 376-377 

TFTP, 274-275 
network command, 253 
network congestion. See bottlenecking 
Network connection (Windows Vista), verifying, 546 
network control protocol (NCP), 156 
network interface cards. See NICs 
network interface layer (TCP/IP), 164 
network latency, VoIP, 496 
network layer, OSI model, 123 


network mask parameter (“‘Hello” packets), 275 


Network Neighborhood connection (Windows NT/98), 


verifying, 552 
network numbers, defined, 16, 253 
network operations centers. See NOCs 
network servers 
account lockout policies, configuring, 552 
enabling user accounts, 554 
locked out accounts, 553 
messages to users, 555 
viewing connected users, 554 
adding, 513 
computers, adding, 522-526 
configuring, 514 
groups, adding, 528-532 
installing, 514 
IP addresses, configuring, 521-522 
My Network Places connection 
Windows 2000, 550-551 
Windows XP, 546-549 
Network connection (Windows Vista), verifying, 546 
Network Neighborhood connection (Windows NT/98), 
verifying, 552 
network types 
client/server, 511-512 
peer-to-peer, 510-511 
organizational units, adding, 528-532 
permissions, 533-534 
policies, 533-534 
Windows 2003, 539, 542-544 
Windows 2008, 534-536, 539 
server types, 512-513 


network servers = 


675 


users, adding, 526-527 
Windows 2003 servers, creating, 514 
Configure DNS window, 519 
Create or Join Forest window, 516 
DNS warning, 518 
domain controller types, 515 
file directory locations, 517 
NetBIOS Domain Name window, 517 
New Domain Name window, 516 
options summary, 520 
Permissions window, 519 
Shared System Volume window, 517 
Welcome screen, 515 
Windows 2008, configuring, 521 
network slowdowns, 126 
network start command (Linux), 592 
network stop command (Linux), 592 
network types 
client/server, 511-512 
peer-to-peer, 510-511 
Networking Challenge software, RIP, 244-245 
New Technology File System. See NTFS 
NEXT (near end crosstalk), 71-72 
next hop addresses, 199, 231 
NICs (network interface cards) 
combo terminations, 102 
defined, 11 
Ethernets, 11 
NLOS (non line-of-sight), 432 
nm (nanometers), 451 
nmap command (Linux), 601 
no ip directed-broadcast command, 396 
no shutdown (no shut) command, 214 
NOCs (network operations centers), 344 
nominal velocity of propagation (NVP), 74 
non line-of-sight. See NLOS 
non-internet routable IP addresses, 173 
NS (name service) records, 362 
NTES (New Technology File System), 115 
numbering systems 
binary-decimal conversions, 165-166 
binary-hexadecimal, 170 
decimal-binary conversions, 166-168 
hexadecimal, 168-170 


numerical aperture, 453 
numerics 
office-type LANs, 32-33 
optical Ethernet, 470 
NVP (nominal velocity of propagation), 74 
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OCs (optical carriers), 292 
OFDM (orthogonal frequency division multiplexing), 
802.11 WLANs, 418 
office-type LANs, configuring 
cabling, 32-34 
devices, documenting, 30 
IP addresses, 34 
star topology connections, 32 
open authentication, 436 
open buses, industrial networks, 630-631 
Open Shortest Path First. See OSPF 


Open Shortest Path First Interior Gateway Protocol. 
See OSPFIGP 


open system interconnect. See OSI 
openssh applications, 594 
operating systems (OS), MAC address retrieval, 13 
operational mode (Juniper routers) 
command completion, 264 
help command (?), 263 
{master} mode, 263 
network connectivity, 266 
PICs, 266 
prompts, 263 
router configuration, viewing, 265 
routing engines, 265 
version information, 264 
optical carriers. See OCs 
optical Ethernet, 469-470 
optical networking 
advantages, 450 
architectures 
building distribution, 470-472 
campus distribution, 472-475 
data rates, 469 
defining optical networking, 468-470 
fiber to the business, 469 
fiber to the curb, 469 
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fiber to the desktop, 469 
fiber to the home, 469 
optical Ethernet, 469-470 
standards, 468 
armored fiber optics, 628 
attenuators, 463, 478 
branching devices, 463 
cable losses, 476-478 
connections and splicing, 465-466 
connector losses, 476 
construction, 452 
couplers, 464 
designing, 475-478 
diode lasers, 461 
distance-limiting parameters 
attenuation, 457 
dispersion, 458-460 
dispersion compensation, 460-461 
distributed feedback lasers, 462 
DLs versus LEDs, 462 
environments, 475 
extra losses, 476 
extra margins, 478 
fiber color code for 12 fibers in a bundle, 474 
fiber connectorization, 466-467 
fiber optic components, 449 
fiber strands, 453 
fibers, 463 
graded-index fibers, 454-455 
isolators, 463 
LEDs, 461 
light detectors, 464 
light reflection, 451 
light refraction, 451-452 
maintenance margins, 476 
mode field diameter, 456 
multimode fibers, 453 
numerical aperture, 453 
operational margins, 476 
optical fiber types, 453-454 
optical-line amplifiers, 464 
receive signal power, 476 
receiver sensitivity, 477 
safety, 479-480 
single-mode fibers, 455-457 


single-mode/multimode, compared, 456 
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spectrum notation, 451 
splice losses, 476 
splitters, 463 
step-index fibers, 455 
transmitter power output, 476 
troubleshooting, 481 
tunable lasers, 462 
types of fiber, 456 
vertical cavity emitting lasers, 462 
wavelength division multiplexers, 464 
wavelengths, 452 
optical spectrums, defined, 452 
optical time-domain reflectometers. See OTDRs 
optical-line amplifiers, 464 
organizational units, adding to Windows 2003/2008 
server domains, 528-532 
organizationally unique idenitifers. See OUIs 
orthogonal frequency division multiplexing. See 
OFDM 
OSI (open system interconnect) model 
defined, 122 
layers, 123 
network problems, isolating, 124 
OSPF (Open Shortest Path First), 250 
advantages/disadvantages, 252 
area 0, 254 
areas, 251 
“Hello” packets, 251 
capturing, 276-277 
IP address ranges, 275 
parameters, 275 
RIDs, 276 
viewing, 277 
Juniper routers configuration, 270-271 
LSAs, 251 
Network Challenge software, 256-257 
RIP/IGRP, compared, 251 
routes, configuring, 252-256 
VLSMs, 251 
wild card bits, 253 
OSPFIGP (Open Shortest Path First Interior Gateway 
Protocol), 277 
OTDRs (optical time-domain reflectometers), 481 
OUIs (organizationally unique idenitifers), 11 
outbound data traffic, 344 
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overloading, 29 

ownership commands (Linux), 577 
cherp, 576 
chmod, 573-575 
chown, 576 


P 


Packet Internet Groper. See ping command 


packets 
captured, 38-42 
defined, 10 


Ethernets, 10-11 
filtering, firewalls, 397 
sequence numbers, 490 
sniffing, 390, 436 
switching, 305 
SPI, 28 
paging procedure (Bluetooth), 430 
pair data, CAT6 link tests, 76 
passwords 
cracking, 389-390 
home networks, 27 
line console, 372-373 
protection, routers privileged EXEC mode, 213 
routers line console, 213 
switches, 372 
PAT (Port Address Translation), 29 
patch cables 
CAT5/5e straight-through, configuring 
inserting wires into RJ-45 plug, 70 
Jacket, stripping, 69 
RJ-45 plug, crimping, 71 
wire pairs, separating, 70 
defined, 56 
horizontal cabling, 56 
path determination, dynamic routing protocols, 237 
payloads, 306 
PBX (private branch exchange), 488 
tie lines, replacing, 491-493 
upgrading, 493-494 
PC Card adapters, 20 
PCI (Peripheral Component Interconnect), 103 
PCM (pulse code modulation), 489 
PDNs (public data networks), 298 


PDs (Powered Devices), 368 
peer-to-peer networks, defined, 510-511 
peering, 339 
per-destination load balancing, 358 
per-packet load balancing, 358 
performance bottlenecks, 59 
Peripheral Component Interconnect. See PCI 
permanent interfaces, 266 
permanent virtual connections. See PVCs 
permissions, configuring, 533-534 
permissions commands (Linux), 573-577 
physical addresses. See MAC addresses 
physical fiber maps, 473-474 
physical interface cards. See PICs 
physical layer (OSI model), 123 
physical layer cabling 
1O0GBASE-T 
AXT, 83-84 
signal balance, 54 
signal transmission, 85-86 
standard, 83 
CATSe/5 straight-through patch cables, configuring 
crimping RJ-45 plugs, 71 
four wire pairs, 61 
inserting wires into RJ-45 plug, 70 
Jacket stripping, 69 
separating wire pairs, 70 
CAT®6 horizontal link cables, terminating, 65 
bend-limiting strain relief boot, 65, 68 
four wire pairs, 61 
jacket stripping, 66 
lacing tool, 66 
RJ-45 jack and lacing tool alignment, 67 
crossover cables, 64 
defined, 51 
STP, 60 
straight-through, 64 
structured 
campus hierarchical topology, 53 
EIA/TIA 568-B, 51 
horizontal cabling, 54-56 
standards, 51 
subsystems, 52 
telecommunications architecture, 52-53 
TIA/EIA 568-A, 51 
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testing, 71 
ACR, 74 
attenuation, 72 
CAT6 links, 75-82 
channel specifications, 72 
delay skew, 74 
ELFEXT, 74 
NEXT, 72 
propagation delay, 74 
PSACR, 74 
PSELFEXT, 74 
PSNEXT, 73 
return loss, 74 
transmit/receive pairs, aligning, 62-63 
troubleshooting 
cable stretching, 87 
CATS5e test examples, 88, 92-93 
failing to meet manufacturer specifications, 87 
installation, S6 
UTP 
balanced mode, 58 
bottlenecking, 59 
categories, 58-59 
full duplex gigabit Ethernet support, 59 
high-performance, 60-61 
RJ-45 modular plug example, 57 
standards, 57 
piconets, 430 
PICs (physical interface cards), 266 
ping (Packet Internet Groper), 35 
ping command 
hub-switch comparison, 131-132 
LANs, testing, 35-36 
Surveyor protocol analyzer, 39-40 
pipe command (Linux), 585 
planning home networks, 25 
PLCs (programmable logic controllers), 622 
PoE (Power over Ethernet) 
benefits, 367 
campus networks, 367-369 
networking hardware defined, 368 
PDs, 368 
PoE Plus, 369 
PSE, 368 
point of presence. See POP 


point-to-multipoint WLAN configuration, 438 
antenna site survey, 439 
multipoint distribution, 440 
point-to-point wireless links, 439-440 
remote installations, 442 
point-to-point connections, Frame Relay clouds, 300 
point-to-point Frame Relay router connections, con- 
figuring, 302-304 
point-to-point physical interfaces, 301 
Point-to-Point protocol. See PPP 
Point-to-Point Tunneling Protocol. See PPTP 
polarization mode dispersion, 458 
policies 
account lockout policies, configuring, 552 
enabling user accounts, 554 
locked out accounts, 553 
messages to users, 555 
viewing connected users, 554 
configuring, 533 
Windows 2003, 539, 542-544 
Windows 2008, 534-536, 539 
POP (point of presence), 294 
Port Address Translation. See PAT 
port-based VLANs, 369 
ports 
assignment website, 158 
defined, 8 
FastEthernet, naming, 143 
input, 33 
serial, naming, 143 
straight through, 33 
uplink, 33 
well-known, 157 
Power Sourcing Equipment. See PSE 


Power Sum Alien Attenuation to Crosstalk Ratio. See 
PSAACRF 


Power Sum Alien Near-End Cross-Talk. See 
PSANEXT 


Power Sum NEXT. See PSNEXT 

power-sum attenuation-crosstalk. See PSACR 
Powered Devices. See PDs 

PPP (Point-to-Point protocol), 296 

PPTP (Point-to-Point Tunneling Protocol), 331 
PQ (priority queueing), 497 

prefix length notation, 180 


prefix length notation „— 
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presentation layer (OSI model), 123 
print servers, 513 
printers, Linux, 607 
priority queuing (PQ), 497 
private addresses, defined, 16 
private branch exchange. See PBX 
private IP addresses, 173 
privileged EXEC mode (routers) 
entering, 211 
Fast Ethernet interface configuration, 214 
hostname, 212 
line console passwordes, 213 
Net-Challenge software, 216-217 
password protection, 213 
serial interface configuration, 214-216 
privileged mode 
defined, 211 
switches, 371 
probing, 404 
proc directory (Linux), 570 
Profibus, 630 
Profinet protocol, 630 
programmable logic controllers. See PLCs 
propagation delay, 74 
proprietary buses, industrial networks, 631 
protocol analyzer (Surveyor), 37 
captured packets, 38-42 
installing, 38 
pinging computers, 39-40 
protocol-based VLANs, 370 
protocols 
ARP, 39, 162 
auto-negotiation, 145 
advantages/disadvantages, 148 
FLPs, 146 
full/half duplex, 146-147 
process, 146 
BGP, 338 
configuring, 339-343 
Net-Challenge configuration, 343-344 
connection oriented, 158 
CSMA/CD, 10 
DataHighwayPlus, 631 
defined, 5 


DHCP, 317 
IP assignment for campus networks, 358-360 
TCP packet transfers, 360-361 
distance vector, 238-239 
dynamic routing, 236 
convergence, 237 
distance vector, 238-239 
features, 237 
link state, 239 
load balancing, 237 
metrics, 237 
path determination, 237 
EAP, 437 
EIGRP 
DUAL finite state machine, 257 
neighbor discovery recovery, 257 
Network Challenge software, 262 
protocol dependent modules, 257 
reliable transport protocol, 257 
route configuration, 257-261 
fieldbus, 618 
FTP, data packets, 185 
H.323, 489 
HDLC, 296 
ICMP, 35 
IGP, 277 
IGRP 
administrative distance, 245 
autonomous systems, 246 
classful networks, 246 
enabling, 246 
enhanced. See EIGRP 
holddowns, 245 
metrics, 245 
Network Challenge software, 250 
OSPF, compared, 251 
route configuration, 246-249 
split horizons, 245 
industrial Ethernet, 628 
Ethernet/IP, 629 
Foundation Fieldbus HSE, 629 
IDA, 630 
MMS, 630 
Modbus TCP, 630 
Profinet, 630 
IP, 162 
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IPX, 345 
L2TP, 331 
legacy, 624 
link integrity tests, 33 
link state, 239 
OSPF, 250 
advantages/disadvantages, 252 
area 0, 254 
areas, 251 
Hello packets, 251, 275-277 
Juniper router configuration, 270-271 
LSAs, 251 
Network Challenge software, 256-257 
RIP/IGRP, compared, 251 
routes, configuring, 252-256 
VLSMs, 251 
wild card bits, 253 
OSPFIGP, 277 
PPP, 296 
PPTP, 331 
RAS, selecting, 317 
RIP 
classful addressing, 240 
enabling, 240 
initializing, 241 
Juniper router configuration, 269-270 
network advertising, 240 
Networking Challenge software, 244-245 
OSPF versus, 251 
route configuration, 242-244 
routing loops, 239 
RTCP, 490 
RTP, 490 
RTPS, 630 
SIP, 489 
Slotted Aloha, 435 
SNMP 
configuring, 365-367 
managing campus networks via, 365-367 
MIB, 364 
SSIP, 489 
static routing 
configuring, 234-235 
data packet flow between LANs, 231 
default gateways, 227 
gateway of last resort, 233 


host PC routing tables, 228 
loopbacks, 228 
Network Challenge software, 236 
next hop IP addresses, 231 
routing table codes, 232 
three-router campus network, 228, 232 
two-router network, 229 
variable length subnet masking, 231 
STP 
BPDUs, 377 
states, 378 
Surveyor protocol analyzer, 37 
captured packets, examining, 38-39 
installing, 38 
packets, capturing, 40-42 
pinging computers, 39-40 
TCP/IP, 16 
application layer, 157-158 
development, 156 
Internet layer, 162-164 
layers, 156 
network interface layer, 164 
transport layer, 158-162 
TFTP 
configuring, 271-273 
Network Challenge software, 274-275 
UDP, 161-162 
WAN routing, 337 
X.25, 298 
proxy servers, 397, 513 
ps command (Linux), 579-580 
PSAACRF (Power Sum Alien Attenuation to Crosstalk 
Ratio), 83 
PSACR (power-sum attenuation-crosstalk), 74, 79 
PSANEXT (Power Sum Alien Near-End Cross-Talk), 
83 
PSE (Power Sourcing Equipment), 368 
PSELFEXT (Power Sum Equal Level Far-End Cross- 
Talk), 74 
pseudorandom, 417 
PSNEXT (Power Sum NEXT), 73 
PSTN (public switched telephone network), 488 
public data networks. See PDNs 
public switched telephone network. See PSTN 
pulse code modulation. See PCM 


pulse code modulation ,— 
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pulse dispersion, 454 

PVCs (permanent virtual connections), 299 
ATM, 306 
Frame Relay networks, 300 

pwd command (Linux), 570 


Q-R 

QoS (Quality of Service), VoIP 
jitter, 495-496 
network latency, 496 
queuing, 496-497 

queuing 
CQ, 497 
PQ, 497 
VoIP, 496-497 


Radio Frequency Identification. See RFID 


RADIUS (Remote Authentication Dial-In User 
Service), 437 


RAM (Random Access Memory). See memory 
range extenders, defined, 27 
ranging, 310 
RAS (remote access server) 
client configurations, 323-325 
Windows 2003 server configurations 
enabling RAS, 315 
IP configuration, 321 
modem configuration, 318, 320 
multiple servers, managing, 318 
protocol selection, 317 


Routing and Remote Access Server Setup Wizard 
menu, 315 


Routing and Remote Access window, 315 
user accounts, 322 
Real-Time Control Protocol. See RTCP 
Real-Time Protocol. See RTP 
Real-Time Publish-Subscribe Protocol. See RTPS 
reboot command (Linux), 599 
receive (RX), 62 
receive cable pairs, aligning, 62-63 
received signal levels. See RSLs 
Red Hat Package Manager. See RPM 


redundancy (industrial networks), 619, 623 
refractive indexes, 451 
remote access servers. See RAS 


Remote Authentication Dial-In User Service. See RA- 
DIUS 


Resistive Power Discovery, 368 
resolv.conf file (Linux), 597 
return loss, 74 
reverse DNS 
campus networks, 364 
defined, 361 
RFID (Radio Frequency Identification), 432-433 
air interface protocol, 435 
backscatter, 432 
frequency of operation, 435 
tags, powering, 434 
RIDs (router IDs), 276 
ring topologies, industrial networks, 623 
RIP (Routing Information Protocol), 239 
classful addressing, 240 
enabling, 240 
initializing, 241 
Juniper routers configuration, 269-270 
network advertising, 240 
Networking Challenge software, 244-245 
OSPF versus, 251 
route configuration, 242-244 
routing loops, 239 
RJ-45 modular connectors, 32, 57 
rm command (Linux), 571 
rmdir command (Linux), 570 
roaming, 416 
rollover cables, 201 
root access, 560 
root directory (Linux), 570 
root servers, DNS, 362 
route add default gw command (Linux), 592 
route flapping, 252 
route print command, 228 
routed networks. See layer 3 networks 
router dead intervals (“‘Hello” packets), 275 
router eigrp command, 259 
router IDs. See RIDs 


router igrp command, 246 
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router ospf command, 253 
router RIP command, 240-242 
Router#, 211 
Router(config)#, 213 
Router(config-if)#, 214 
Router(config-line)#, 213 
Router(config-router)# prompt, 247 
router-to-router VPN connections, 326-331 
routers, 138 
ACLs, applying, 399-400 
ATM configuration, 307 
Cisco 2500 series, 140-141 
Cisco 2600 series, 140 
Cisco 2800 series, 139 
console port connections 
connectors, 201 
console cables, 201 


HyperTerminal serial communications software, 
203-204 


rollover cables, 201 

RS-232 serial communications ports, 201 
settings, 202 

Z-Term serial communications software, 205 


Frame Relay point-to-point connection configuration, 
302-304 


gateways, 145 

home networks, 17, 20 

interface, 138, 242 

Juniper 
assigning IP addresses to interfaces, 268 
configuration mode, 266-267 
hostname configuration, 268 
interfaces, 266 
JUNOS CLI User Guide website, 271 
operating system (JUNOS), 262 
operational mode, 263-266 
OSPF configuration, 270-271 
RIP configuration, 269-270 
static route configuration, 268 
viewing interfaces, 267-268 

LANs, interconnecting, 138, 143-145 

layer 3 networks 
components, 200 
data flow to/from gateways, 197 
data packet exchange, 199 
default gateway addresses, 196 


finding destination networks with subnet masks, 198 
interconnecting LANs, 196 
next hop addresses, 199 
router connections, 200 
segments, 199 
privileged EXEC mode 
entering, 211 
Fast Ethernet interface configuration, 214 
hostname, 212 
line console passwords, 213 
Net-Challenge software, 216-217 
password protection, 213 
serial interface configuration, 214-216 
segments, 145 
terminal configuration mode, 212 
troubleshooting, 217-220 
uptime, 208 
User EXEC mode 
console connection confirmation, 206 
entering, 206 
help command, 207 
Net-Challenge software, 209-211 
show command options, 207 
show flash command, 208 
show version command, 208 
wireless, 17, 21 
routing 
Internet, 338 
autonomous systems, 339 
BGP, configuring, 339-343 
Net-Challenge BGP configuration, 343-344 
static, Juniper routers, 268 
WANs, 337 
Routing and Remote Access Server Setup Wizard, 315 
Routing and Remote Access window, 315 
Routing Information Protocol. See RIP 
routing loops, 239 
routing protocols 
dynamic, 236 
convergence, 237 
distance vector, 238-239 
features, 237 
link state, 239 
load balancing, 237 
metrics, 237 


path determination, 237 


routing protocols „— 
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EIGRP 


DUAL finite state machine, 257 
neighbor discovery recovery, 257 
Network Challenge software, 262 
protocol depenedent modules, 257 
reliable transport protocol, 257 
routes, configuring, 257-261 


IGRP 


administrative distance, 245 
autonomous systems, 246 
classful networks, 246 
enabling, 246 

enhanced. See EIGRP 
holddowns, 245 

metrics, 245 

Network Challenge software, 250 
OSPF, compared, 251 
routes, configuring, 246-249 
split horizons, 245 


OSFPIGP, 277 
OSPF, 250 


advantages/disadvantages, 252 

area 0, 254 

areas, 251 

“Hello” packets, 251, 275-277 
Juniper router configuration, 270-271 
LSAs, 251 

Network Challenge software, 256-257 
RIP/IGRP, compared, 251 

routes, configuring, 252-256 

VLSMs, 251 

wild card bits, 253 


RIP 


classful addressing, 240 

enabling, 240 

initializing, 241 

Juniper router configuration, 269-270 
network advertising, 240 

Networking Challenge software, 244-245 
OSPF, compared, 251 

route configuration, 242-244 

routing loops, 239 


Static, 227 


configuring, 234-235 
data packet flow between LANs, 231 
default gateways, 227 


gateway of last resort, 233 
host PC routing tables, 228 
loopbacks, 228 
Network Challenge software, 236 
next hop IP addresses, 23 1 
routing table codes, 232 
three-router campus network, 228, 232 
two-router network, 229 
variable length subnet masking, 231 
TFTP 
configuring, 271-273 
Network Challenge software, 274-275 
viewing, 242 
routing tables, 144, 228 


RPM (Red Hat Package Manager), application man- 
agement 


Apache Web service installation, 588-589 
file searches, 585-586 
installed applications, viewing, 584 
installing Red Hat applications, 586-587 
man page, 584 
Mozilla, 588 
uninstalling telnet applications, 586 
rpm -e command (Linux), 586 
rpm -i command (Linux), 586-587 
rpm -qa command (Linux), 584 
rpm -qf command (Linux), 585-586 
RS-232 serial communications ports, 201 
RSLs (received signal levels), 463 
RTCP (Real-Time Control Protocol), 490 
RTP (Real-Time Protocol), 490 
RTPS (Real-Time Publish-Subscribe Protocol), 630 
RX (receive), 62 


S 


safety, optical networking, 479-480 

SATA (Serial Advanced Technology Attachment), 106 
sbin directory (Linux), 570 

SC fiber connectors, 466 

scattering, 457 

SCSI (Small Computer System Interface), 105-106 
SDH (Synchronous Digital Hierarchy), 468 

SDRAM (Synchronous DRAM), 113 
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secure MAC address assignments, 134 
secure session initiation protocol. See SSIP 
Secure Shell. See SSH 
security 
ACLs, 396-398 
blocking host IP addresses example, 403 
blocking SMB data packets example, 400-401 
extended, 399 
named access list example, 401-402 
routers, applying to, 399-400 
standard, 399 
DDoS attacks, 396 
DoS attacks, 395-396 
firewalls, 396 
ACLs, 398-403 
attack prevention, 398 
home networks, 28 
Linux, 605 
packet filtering, 397 
proxy servers, 397 
stateful, 397 
home networks, 27-28 
intrusions 
detecting, 404 
packet sniffing, 390 
password cracking, 389-390 
social engineering, 389 
viruses, 393 
vulnerable software, 391-393 
wireless vulnerabilities, 394 
worms, 393 
IPsec, 334, 390 
Linux, troubleshooting, 601 
passwords 
cracking, 389-390 
line console, 372-373 
switches, 372 
unsecured data packets 
captured packets, 407 
capturing packets setup, 405 
protecting, 408 
router connections, 406 
telnet session packets, 407 
telnetting to routers, 405 


user verification, 406 


VoIP, 497 

WLANs, 435-438 
segments 

defined, 124, 145 

layer 3 networks, 199 
Serial Advanced Technology Attachment. See SATA 
serial ports, naming, 143 
server message block. See SMB 
servers 

application, 512 

DHCP, 513 

DNS, 513 

email, 512 

fax, 513 

FTP, 513, 596 

information, 512 

network. See network servers 

print, 513 

proxy, 397, 513 

remote access 

client configuration, 323-325 
Windows 2003 server configuration, 315-322 

root, DNS, 362 

types, 512-513 

VPN configuration, 331 

Web, 512 
service set identifiers. See SSIDs 
Session Initiation Protocol. See SIP 
session layer (OSI model), 123 
set protocols command, 270 
sh ip int brief command, 218-220 
sh ip route command, 232 
sh run command, 303 
shadowing, 623 
sharekey authentication, 436 
shielded twisted-pair. See STP 
shortcuts (Linux administration commands), 583 
show access-list command, 402 
show atm vc command, 308 
show command, options, 207 
show controllers command, 216 
show controllers serial command, 216 
show flash command, 208 


show frame-relay PVC command, 304 
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show interfaces brief command, Juniper routers, 267 


show ip interface brief (sh ip int brief) command, 214, 
218-220, 242 


show ip protocol (sh ip protocol) command, 242 
show ip route (sh ip route) command, 231 
show ip route igrp (sh ip route igrp) command, 249 
show ip route static (sh ip route static) command, 234 
show running config (sh run) command, 235 
show startup config (sh start) command, 235 
show version command, 208 
shutdown command (Linux), 583 
shutdown -h now command (Linux), 583 
signal transmission, L1OGBASE-T, 85-86 
signal transport (VoIP), 489 
signaling, VoIP, 488-489 
signatures, 404 
Simple Network Management Protocol. See SNMP 
single mode (sm) fibers, 455-457, 473 
single points-of-failure, 623 
SIP (Session Initiation Protocol), 489 
site surveys, WLANs, 424, 426, 428 
Slotted Aloha protocol, 435 
slowdowns, 126 
sm (single mode) fibers, 473 
Small Computer System Interface. See SCSI 
smart devices, 621 
SMB (server message block), 398 
Smurf attacks, 395 
SNMP (Simple Network Management Protocol) 
campus networks, 365-367 
configuring, 365-367 
MIB, 364 
snmp community public ro command, 365 
social engineering, 389 
SONETs (Synchronous Optical Networks), 468 
spam over Internet telephony. See spit 
Spanning-Tree Protocol. See STP 
spatial streams, 419 
spectrum notation, 451 
SPI (Stateful Packet Inspection), 28 
spit (spam over Internet telephony), 497 
split horizons, 245 
splitters, 463 
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spoofs, 396 
SS7, 488 
SSH (Secure Shell), 408, 594-595 
SSIDs (service set identifiers) 
802.11 WLAN configuration, 421 
home networks, 28 
SSIP (secure session initiation protocol), 489 
ST fiber connectors, 466 
standard ACLs, 399 
star topologies 
defined, 8 
LANs, 8 
office-type LANs, 32 
stateful firewalls, 397 
Stateful Packet Inspection. See SPI 
static, 134 
static MAC address assignments, 134 
static routing 
defined, 227 
Juniper routers, 268 
protocols 
configuring, 234-235 
data packet flow between LANs, 231 
default gateways, 227 
gateway of last resort, 233 
host PC routing tables, 228 
loopbacks, 228 
Network Challenge software, 236 
next hop IP addresses, 231 
routing table codes, 232 
three-router campus network, 228, 232 
two-router network, 229 
variable length subnet masking, 231 
WANs, 337 
static VLANs 
configuring, 373-377 
defined, 370 
Network Challenge software, 376-377 
statistical data, 620 
step-index fibers, 455 
store-and-forward switching, 137 
STP (shielded-twisted pair) cables, 51, 60 
STP (Spanning-Tree Protocol) 
BPDUs, 377 
States, 378 
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straight-through cables, CAT5/Se patch cable configu- 
ration, 64 
jacket stripping, 69 
RJ-45 plugs 
crimping, 71 
inserting wires into, 70 
wire pairs, separating, 70 
straight-through ports, 33 
streaming data, 164 
stretching cables, 87 
structured cabling 
campus hierarchical topology, 53 
EIA/TIA 568-B, defined, 51 
horizontal cabling, 54 
patch cables, 56 
terminated, 55 
standards, 51 
subsystems, 52 
telecommunications architecture, 52-53 
TIA/EIA 568-A, 51 
STS (Synchronous Transport Signals), 469 
stubby areas, 337 
su command (Linux), 580 
subinterfaces 
ATM routers, configuring, 307 
Frame Relay networks, 300 
subnet masks 
8 subnet division example, 177-178 
binary/decimal equivalents, 176 
CIDR notation, 180 
creating, 173-175 
destination networks, finding, 198 
prefix length notation, 180 
router-to-router link example, 179-180 
VLSM, 231, 251 
subsystems, structured cabling, 52 
supernetting, 180. See also CIDR blocks 
SVCs (switched virtual circuits), 306 
Switch(config)# prompt, 372 
Switch(config-line)# prompt, 372 
switch-56 connections, 293 
switches 
configuring 
campus networks, 370-371 


hostnames, 371 


line console, 372-373 
password protection, 372 
privileged mode, 371 
STP, 377-378 
defined, 8 
home networks, 19 
industrial Ethernet, 627 
LANs, interconnecting, 128 
hosts, 129 
hub comparison, 130-132 
isolating the collision domains, 136 
managed switches, 133-137 
multilayer switches, 137-138 
networking devices, 129 
latency, 137 
layer 2, 128 
link lights, 33 
managed 
aging time, 134 
benefits, 136 
broadcast domains, 137 
CAM, 136 
Cisco Catalyst 2960, 133 
flooding, 137 
frames, forwarding, 137 
IP addresses, configuring, 136 
isolating the collision domains, 136 
MAC address assignments, 134 
multilayer, 137-138 
star topologies, 8 
SYN attacks, 395 
Synchronous Digital Hiearchy. See SDH 
Synchronous DRAM. See SDRAM 
Synchronous Optical Networks. See SONETs 
Synchronous Transport Signals. See STS 
system config tools (Linux) 
date/time, 605 
firewalls, 605 
network menu, 607 
printers, 607 
services, 609 
software management, 607 
users, 609 
viewing, 604 
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System Properties menu (Vista), 108 
system-config commands (Linux) 

date/time, 605 

firewalls, 605 

network menu, 607 

printers, 607 

services, 609 

software management, 607 

tools, viewing, 604 

users, 609 


y 


T1 framing, 294-295 
T1 to T3 data rates, 292 
T568A wiring guideline, 60 
T568B wiring guideline, 60 
tables 

bridging, defined, 124 

routing, 144, 228 
tag-based VLANs, 370 
tags 

dici, 300 

RFID, powering, 434 


TCA (Topology Change Notification 
Acknowledgement), 377 


TCL (Transverse Conversion Loss), 84 

TCN (Topology Change Notification), 377 
TCOs (telecommunications outlets), 52 

TCP (Transport Control Protocol), 158, 360-361 


TCP/IP (Transmission Control Protocol/Internet 
Protocol), 16 


development, 156 
layers, 156 
application, 157-158 
Internet, 162-164 
network interface, 164 
transport, 158-162 
TCTL (Transverse Conversion Transfer Loss), 84 
TDM (time division multiplexing), 492 


TE (telecommunications enclosure). See telecommuni- 
cations closet structured cabling subsystem 


Telco clouds, 293 


telecommunications cabling architecture, 52-53 


688 System Properties menu 


telecommunications closet structured cabling subsys- 
tem, 52 
Telecommunications Industry Association. See TIA 
telecommunications outlets. See TCOs 
telecommunications room (TR). See telecommunica- 
tions closet structured cabling subsystem 
Telnet, defined, 584 
terminal configuration mode (routers), 212 
terminated cables, 55 
terminating 
CAT®6 horizontal link cables 
bend-limiting strain relief boot, 65, 68 
Jacket stripping, 66 
lacing tool, 66 
RJ-45 jack and lacing tool alignment, 67 
high-performance UTP, 60-61 
testing 
cables, 71 
ACR, 74 
attenuation, 72 
CAT6 links, 75-82 
channel specifications, 72 
delay skew, 74 
ELFEXT, 74 
NEXT, 72 
propagation delay, 74 
PSACR, 74 
PSELFEXT, 74 
PSNEXT, 73 
return loss, 74 
LANs, 35-36 
router interface configurations, 242 
TFTP (Trivial File Transfer Protocol) 
configuring, 271 
data transfer, 273 
port 69 write request, 273 
port assignment write request, 273 
Network Challenge software, 274-275 
ThinNet, 6 
TIA (Telecommunications Industry Association), 51 
TIA/EIA 568-A, 51 
tie lines, defined, 492 
time division multiplexing. See TDM 
timestamps, 490 


timing considerations, industrial networks, 622 
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TLDs (top level domains), 362 
tmp directory (Linux), 570 
token passing, 6 
token-ring hubs, 6 
token-ring topologies, 6 
top level domains, 362 
topologies 
bus topologies, 6, 8 
defined, 5 
industrial Ethernet, 626-627 
LANs, 5-9 
mesh topologies, 9 
ring topologies (industrial networks), 623 
star topologies, 8, 32 
token-ring topologies, 6 
Topology Change Notification. See TCN 


Topology Change Notification Acknowledgement. See 
TCA 


totally stubby areas, 337 


TR (telecommunications room). See telecommunica- 
tions closet structured cabling subsystem 


traffic (Internet) 
analyzing, 344 
frame size distribution, 347 
network layer host tables, 346 
network layer matrix, 345-346 
utilization/errors strip chart, 344 
data traffic, campus networks 
daily, 379 
hourly, 379 
weekly, 380 
filtering, 354 
transceivers, 415 
transient interfaces, 267 
translation bridges, 127 


Transmission Control Protocol/Internet Protocol. See 
TCPAP 


transmit (TX), 62 

transmit cable pairs, aligning, 62-63 
transparent bridges, 127 

Transport Control Protocol. See TCP 
transport layer (OSI model), 123 
transport layer protocols 


data packet sequence, 159 
TCP, 158 


TCP handshake, 160 
terminating the TCP, 160-161 
UDP, 161-162 
Transverse Conversion Loss. See TCL 
Transverse Conversion Transfer Loss. See TCTL 
trees, defined, 515 
Trivial File Transfer Protocol. See TFTP 
troubleshooting 
cables 
CATS5e test examples, 88, 92-93 
failing to meet manufacturer specifications, 87 
installation, 56 
stretching, 87 
home networks, 26 
Linux 
boot processes, 598-600 
boot services, 602-603 
security, 601 
users, 600-601 
optical networking, 481 
routers, 217-220 
VPN tunnels, 331 
tunable lasers, 462 
TX (transmit), 62 


U 


U-NII (Unlicensed National Information 
Infrastructure), 418 


UDP (User Datagram Protocol), 161-162 


UDP/IP (User Datagram Protocol/Internet Protocol), 
629 


UHF (ultra-high frequency), 435 
unicast addresses, 184 
unicast packets, 360 
Universal Serial Bus 1.1. See USB 1.1 
Universal Serial Bus 2.0. See USB 2.0 
unmount command (Linux), 583 
unsecured data packets 

captured packets, 407 

capturing packets setup, 405 

protecting, 408 

router connections, 406 

telnet session packets, 407 


unsecured data packets ,— 
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telnetting to routers, 405 
user verification, 406 
unshielded twisted-pair. See UTP cables 
unspecified bit-rate class, 306 
up arrow (Linux), 583 
upgrading PBXs, 493-494 
uplink ports, 33 
uptime, routers, 208 
USB 1.1 (Universal Serial Bus 1.1), 104 
USB 2.0 (Universal Serial Bus 2.0), 104 
USB connections, 105 
user accounts, RAS configuration, 322 
User Datagram Protocol. See UDP 
User Datagram Protocol/Internet Protocol. See 
UDP/IP 
User EXEC mode (routers) 
entering, 206 
help command, 207 
Net-Challenge software, 209-211 
show command options, 207 
show flash command, 208 
show version command, 208 
users 
Linux 
adding to, 561-563 
managing, 609 
troubleshooting, 600-601 
multi-homed, 338 


Windows 2003/2008 server domains, adding to, 
526-527 


usr directory (Linux), 570 

UTP (unshielded twisted-pair) cables, 51 
balanced mode, 58 
bottlenecking, 59 
categories, 58-59 
F/UTP, 84 
full duplex gigabit Ethernet support, 59 
high-performance, terminating, 60-61 
RJ-45 modular plug example, 57 
standards, 57 


V 


V.44/V.34 analog modem connection standard, 309 
V.92/V.90 analog modem connection standard, 309 
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var directory (Linux), 570 
var/log directory (Linux), 600 
variable bit-rate real time class, 306 
variable bit-rate/non-—real time class, 306 
variable length subnet masks. See VLSMs 
VCCs (virtual channel connections), 306 
VCIs (virtual channel identifiers), 306 
VCs (virtual channels), 308 
VCSEL s (vertical cavity surface emitting lasers), 462 
vendor support, industrial networks, 625 
verifying 
device drivers 
Mac OS X, 110-111 
Windows Vista/XP, 108-109 
memory amounts installed, 113 
My Network Places connection 
Windows 2000, 550-551 
Windows XP, 546-549 
Network connection (Windows Vista), 546 


Network Neighborhood connection (Windows NT/98), 
552 


vertical cavity surface emitting lasers. See VCSELs 
VFLs (Visual Fault Locators), 481 
viewing 
ATM interfaces, 308 
ATM virtual channels, 308 
file contents commands (Linux), 569 
cat, 568 
more, 567 
“Hello” packets, 277 
installed applications (Linux), 584 
Juniper router 
configuring, 265 
interfaces, 267-268 
Linux system-config tools, Is system-config, 604 
MAC addresses, 12 
routing protocols, 242 
virtual channel connections. See VCCs 
virtual channel identifiers. See VCIs 
virtual channels. See VCs 
Virtual LANs. See VLANs 
virtual path connections. See VPCs 
virtual path identifiers. See VPIs 
Virtual Private Networks. See VPNs 
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virtual tie lines, 489 
viruses, 393 
Visual Fault Locators (VFLs), 481 
VLANs (Virtual LANs), 369 
dynamic, 370 
membership assignments, 370 
static 
configuring, 373-377 
defined, 370 
Network Challenge software, 376-377 
types, 369 
VoIP, 497 
VLSMs (variable length subnet masks), 231, 251 
VoIP (Voice over IP) 
data packet analyzation, 497 
acknowledgement, 499, 502 
call processor call plans, 502 
call processor messages, 499 
collecting data packets, 498 
IP network handshaking, 504 
NBX call processor codes, 498 
PCM voice data, 499 
test setup, 502 
gateways, 488, 492 
implementing 
replacing PBX tie lines, 491-493 
switching to IP telephony solutions, 494 
upgrading PBXs, 493-494 
overview, 488 
packet sequence numbers, 490 
PBX, 488 
Qos 
jitter, 495-496 
network latency, 496 
queuing, 496-497 
security, 497 
signal transport, 489 
signaling, 488-489 
SIP, 489 
SSIP, 489 
timestamps, 490 
virtual tie lines, 489 
VLANs, 497 
VPCs (virtual path connections), 306 
VPIs (virtual path identifiers), 306 


S 


VPNs (virtual private networks), 28, 325 
remote client configurations 
Cisco VPN Client software, 334-337 
Mac OS X, 333 
Windows Vista, 332 
Windows XP, 332-333 
router-to-router connections, 326-331 
server configuration, 331 
tunnel connections, 326 
tunnels, troubleshooting, 331 
vulnerable software attacks, 391-393 


W 


WANs (wide area networks), 5, 291 

ATM, 305 
classes, 306 
connections, creating, 308 
interfaces, viewing, 308 
PVC interface, 306 
router configuration, 307 
router subinterface configuration, 307 
VCI, 306 
virtual channels, viewing, 308 
VPI, 306 

dial-in access 
analog modem technologies, 309-310 
cable modems, 310 
ISDN, 310-312 
remote access servers. See RAS 
xDSL modems, 312-314 

Frame Relay networks, 298 
configuring, 299, 305 
creating connections, 301-302 
point-to-point connections, 300 
point-to-point router connections, 302-304 
PVCs, 300 
subinterfaces, 300 

Internet data traffic analyzation 
frame size distribution, 347 
network layer host tables, 346 
network layer matrix, 345-346 


utilization/errors strip chart, 344 


WANS 
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Internet routing, 338 
autonomous systems, 339 
BGP, configuring, 339-343 
Net-Challenge BGP configuration, 343-344 
line connections 
data channels, 292-293 
encoding formats, 295-298 
POP, 294 
TI framing, 294-295 
routing, 337 
VPNs, 325 
Cisco VPN Client software, 334-337 
Mac OS X clients, 333 
router-to-router connections, 326-331 
server configuration, 331 
tunnel connections, 326 
troubleshooting tunnels, 331 
Windows Vista clients, 332 
Windows XP clients, 332-333 
war driving, 394 
wavelengths (optical networking), 452 
WDM (wavelength division multiplexing), 451, 464 
Web servers, 512 
websites 
ARIN, 173 
IANA, 15 
IEEE OUI and company ID assignment database, 14 
JUNOS CLI User Guide, 271 
Linux, 565 
port assignments, 158 
weighted fair queueing. See WFQ 
weighted random early discard. See WRED 
well-known ports, 157 
WEP (wired equivalent privacy), 28, 394 
WFQ (weighted fair queuing), 496 
who command (Linux), 601 
Wi-Fi. See wireless networks; WLANS 
Wi-Fi Alliance, 17 
Wi-Fi Protected Access. See WPA 
wide area networks. See WANs 
wild card bits, 253 
WiMAX (Worldwide Interoperability for Microwave 
Access), 432 


Windows 2000, verifying My Network Places connec- 
tion, 550-551 


Windows 2003 servers 

domains 
adding computers, to, 522-526 
adding groups to, 528-532 
adding organization units to, 528-532 
adding users to, 526-527 
creating, 514-519 
policy configuration, 539, 542-544 

RAS configuration 
enabling RAS, 315 
IP configuration, 321 
managing multiple servers, 318 
modem configuration, 318, 320 
protocol selection, 317 


Routing and Remote Access Server Setup Wizard 
menu, 315 


Routing and Remote Access window, 315 
user accounts, 322 
VPN server configuration, 331 
Windows 2008 servers 
configuring, 521 
domains 
adding computer to, 522-526 
adding groups to, 528-532 
adding organizational units, 528-532 
adding users, 526-527 
domain policy configuation, 534-536, 539 
Windows NT/98, verifying Network Neighborhood 
connection, 552 
Windows Vista 
device drivers, 108-109 
Network connection, verifying, 546 
RAS client configuration, 324 
VPN client configuration, 332 
Windows XP 
device drivers, 108-109 
My Network Places connection, verifying, 546-549 
RAS client configuration, 324 
VPN client configuration, 332-333 
winipcfg command, MAC addresses, 13 
wire maps, 64 
wire speed routing, 138 
wired equivalent privacy. See WEP 
wired networks 
advantages, 17 
defined, 16 
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disadvantages, 17 
troubleshooting, 26 
wireless bridges, 127 
wireless local area networks. See WLANS 
wireless networks 
advantages, 17 
configuring, 27 
connections, 27 
defined, 16 
hotspots, 27 
range extenders, 27 
routers, 17 
security, 27-28 
standards, 17 
troubleshooting, 26 
vulnerabilities, 394 
Wi-Fi Alliance, 17 
wireless routers, 17, 21 
Wireless-N adapters, 20 
wiring guidelines, EIA/TIA 568B, 60 
WLANs (wireless local area networks) 
802.11 configuration, 420 
access points, 422 
bridges, 422 
lost associations, 422 
range, extending, 424 
signals, 423 
site survey, 424-428 
SSIDs, 421 
802.11 standard, 414 
MAC layer, 415 
OFDM, 418-419 
physical layer, 415 
802.1la standard, 420 
802.11b standard, 419-420 
802.11g standard, 419-420 
802.111 standard, 420 
802.11n standard, 419-420 
802.1 1r standard, 420 
access points, 415 
benefits, 414 
Bluetooth, 429 
configuring, 430-43 1 
inquiry procedure, 430 
paging procedure, 430 
piconets, 430 


BSS, 415-416 
CSMA/CA, 416 
DSSS, 417 
ESS, 416 
FHSS, 417 
hand-offs, 416 
point-to-multipoint configuration, 438 
antenna site survey, 439 
multipoint distribution, 440 
point-to-point wireless links, 439-440 
remote installations, 442 
RFID, 433 
air interface protocol, 435 
backscatter, 432 
frequency of operation, 435 
tags, powering, 434 
roaming, 416 
security, 435-438 
security vulnerabilities, 394 
Standard, 415 
WiMAX, 432 
Work Area Outlets. See WOs 
work area structured cabling subsystem, 52 
workstation, defined, 523 
Worldwide Interoperability for Microwave Access. See 
WiMAX 
worms, 393 
WOs (Work Area Outlets), 53 
WPA (Wi-Fi Protected Access), 28, 394, 437 
WPA2, 394 
WRED (weighted random early discard), 496 
write memory (wr m) command, 235 


wuftpd (Washington University ftp server), 596 


X-Y-Z 
X.25 protocol, 298 


xDSL modems, 312-314 
XENPAKSs (10 Gigabit Interface Adapters), 471 


Z-Term serial communications software, configuring, 
205 


zero-dispersion wavelength, 459 


zero-dispersion wavelength „— 
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